diff --git a/cloudflare/main.tf b/cloudflare/main.tf
index bc64788..40e71f6 100644
--- a/cloudflare/main.tf
+++ b/cloudflare/main.tf
@@ -97,3 +97,11 @@ resource "cloudflare_record" "mailgun-mxb" {
   type     = "MX"
   priority = 20
 }
+
+resource "cloudflare_record" "k8s-talk" {
+  domain = "${var.domain}"
+  name   = "k8s"
+  value  = "lightsaber.captnemo.in"
+  type   = "CNAME"
+  ttl    = 3600
+}
diff --git a/docker/kube-image-bouncer.tf b/docker/kube-image-bouncer.tf
new file mode 100644
index 0000000..3462eae
--- /dev/null
+++ b/docker/kube-image-bouncer.tf
@@ -0,0 +1,24 @@
+data "docker_registry_image" "kib" {
+  name = "flavio/kube-image-bouncer:latest"
+}
+
+resource "docker_image" "kib" {
+  name          = "${data.docker_registry_image.kib.name}"
+  pull_triggers = ["${data.docker_registry_image.kib.sha256_digest}"]
+}
+
+resource docker_container "kib" {
+  name  = "kib"
+  image = "${docker_image.kib.latest}"
+
+  labels = "${merge(
+    local.traefik_common_labels,
+    map(
+      "traefik.port", 1323,
+      "traefik.frontend.rule","Host:kib.b88.fun"
+  ))}"
+
+  restart               = "unless-stopped"
+  destroy_grace_seconds = 10
+  must_run              = true
+}