Skip to main content
Bifrost Enterprise provides private container image distribution through dedicated registries, enabling secure deployments in AWS, GCP, Azure, and on-premise environments.

​
Architecture

Bifrost uses a hub-and-spoke model with two container registries optimized for each cloud platform:

​
Registry Distribution

Customer CloudRegistry SourceWhy
AWSAWS ECRNative IAM integration, lowest latency within AWS
GCPGCP Artifact RegistryNative Workload Identity, lowest latency within GCP
AzureGCP Artifact RegistryWorkload Identity Federation from Azure to GCP
On-PremiseGCP Artifact RegistryBasic auth with username/password credentials

​
Authentication Methods

Choose the authentication method based on your deployment environment:
EnvironmentMethodSecurity LevelSetup Complexity
AWS EKSIRSAHighMedium
AWS ECSIAM Task RolesHighLow
GCP GKEWorkload IdentityHighLow
Azure AKSAzure WIFHighMedium
On-PremiseBasic AuthMediumLow
Cloud-native identity federation (IRSA, Workload Identity, Azure WIF) is recommended over static credentials for production deployments.

​
Security Features

​
Encryption

  • In-Transit: All registry communication uses TLS 1.3
  • At-Rest: Images encrypted using cloud-native encryption (AWS KMS, GCP CMEK)

​
Access Control

  • IAM-based: Fine-grained permissions using cloud IAM policies
  • Audit Logging: All image pull operations are logged for compliance
  • IP Restrictions: Optional VPC Service Controls (GCP) or VPC endpoints (AWS)

​
Image Security

  • Vulnerability Scanning: Automatic scanning on push
  • Immutable Tags: Optional tag immutability to prevent overwrites
  • Signed Images: Container image signatures for verification

​
Prerequisites

Before deploying Bifrost Enterprise, ensure you have:
  • AWS account with ECR access
  • EKS cluster (v1.23+) or ECS cluster
  • IAM permissions to create roles and policies
  • kubectl and aws CLI configured

​
Getting Started

AWS Deployment

Deploy on EKS or ECS with IRSA authentication

GCP Deployment

Deploy on GKE with Workload Identity

Azure Deployment

Deploy on AKS with Azure Workload Identity Federation

On-Premise

Deploy anywhere with Docker credentials

​
Support

For enterprise deployment assistance:
  • Email: [email protected]
  • Slack: Connect via Slack Connect for real-time support
  • Documentation: Platform-specific guides linked above