Extensible OCI-image build system for trusted environments based on Kubernetes, with support for image signing.