diff --git a/Dockerfile b/Dockerfile
index 43a7092131dfd4076064ec54433404f99380df9a..e59946b2ec151a47ecea93ceab599660d23ca0d1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -16,12 +16,6 @@ RUN ./configure && \
         rm -f /opt/musl-1.2.0.tar.gz
 FROM mpioperator/mpi-operator:0.1.0 AS base
 FROM ${BASE_REGISTRY}/${BASE_IMAGE}:${BASE_TAG}
-LABEL org.opencontainers.image.title="mpi-operator" \
-      org.opencontainers.image.description="mpi-operator 0.1.0 container based off UBI 8" \
-      org.opencontainers.image.licenses="Apache-2.0" \
-      org.opencontainers.image.url="hub.docker.com/layers/mpioperator/mpi-operator/0.1.0/images/sha256-bb394f8a46650c2abd722c30b25bc771f976b603751235dfdda08a9fb786535f" \
-      org.opencontainers.image.version="0.1.0" \
-      maintainer="karol.stolarski@annoai.com" 
 RUN dnf upgrade -y && \
         dnf clean all && \
         rm -rf /var/cache/dnf
diff --git a/download.yaml b/download.yaml
deleted file mode 100644
index a2f79c0e18626168f93c69a56e2797a3cd86d3eb..0000000000000000000000000000000000000000
--- a/download.yaml
+++ /dev/null
@@ -1,9 +0,0 @@
----
-resources:
-  - url: "docker://docker.io/mpioperator/mpi-operator@sha256:bb394f8a46650c2abd722c30b25bc771f976b603751235dfdda08a9fb786535f"
-    tag: "mpioperator/mpi-operator:0.1.0"
-  - url: "https://musl.libc.org/releases/musl-1.2.0.tar.gz"
-    filename: musl-1.2.0.tar.gz
-    validation:
-      type: sha256
-      value: c6de7b191139142d3f9a7b5b702c9cae1b5ee6e7f57e582da9328629408fd4e8 
diff --git a/hardening_manifest.yaml b/hardening_manifest.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..6f42eba983d10ac61aac2cf1a8106d6194450f28
--- /dev/null
+++ b/hardening_manifest.yaml
@@ -0,0 +1,58 @@
+---
+apiVersion: v1
+
+# The repository name in registry1, excluding /ironbank/
+name: "kubeflow/mpi-operator-0.1.0"
+
+# List of tags to push for the repository in registry1
+# The most specific version should be the first tag and will be shown
+# on ironbank.dsop.io
+tags:
+- "0.1.0"
+- "latest"
+
+# Build args passed to Dockerfile ARGs
+args:
+  BASE_IMAGE: "redhat/ubi/ubi8"
+  BASE_TAG: "8.3"
+
+# Docker image labels
+labels:
+  org.opencontainers.image.title: "mpi-operator-0.1.0"
+  ## Human-readable description of the software packaged in the image
+  org.opencontainers.image.description: "kubeflow mpi-operator 0.1.0 container based off UBI 8"
+  ## License(s) under which contained software is distributed
+  org.opencontainers.image.licenses: "apache-2.0"
+  ## URL to find more information on the image
+  org.opencontainers.image.url: "hub.docker.com/layers/mpioperator/mpi-operator/0.1.0/images/sha256-bb394f8a46650c2abd722c30b25bc771f976b603751235dfdda08a9fb786535f"
+  ## Name of the distributing entity, organization or individual
+  org.opencontainers.image.vendor: "kubeflow"
+  org.opencontainers.image.version: "v0.1.0"
+  ## Keywords to help with search (ex. "cicd,gitops,golang")
+  mil.dso.ironbank.image.keywords: "kubeflow,mpi-operator"
+  ## This value can be "opensource" or "commercial"
+  mil.dso.ironbank.image.type: "opensource"
+  ## Product the image belongs to for grouping multiple images
+  mil.dso.ironbank.product.name: "kubeflow"
+
+# List of resources to make available to the offline build context
+resources:
+  - url: "docker://docker.io/mpioperator/mpi-operator@sha256:bb394f8a46650c2abd722c30b25bc771f976b603751235dfdda08a9fb786535f"
+    tag: "mpioperator/mpi-operator:0.1.0"
+  - url: "https://musl.libc.org/releases/musl-1.2.0.tar.gz"
+    filename: musl-1.2.0.tar.gz
+    validation:
+      type: sha256
+      value: c6de7b191139142d3f9a7b5b702c9cae1b5ee6e7f57e582da9328629408fd4e8 
+
+# List of project maintainers
+# FIXME: Fill in the following details for the current container owner in the whitelist
+# FIXME: Include any other vendor information if applicable
+maintainers:
+- email: "cvernooy@oteemo.com"
+  name: "Christopher Vernooy"
+  username: "cvernooy"
+  cht_member: true # FIXME: Uncomment if the maintainer is a member of CHT
+- name: "Christopher Vernooy"
+  username: "cvernooy"
+  email: "cvernooy@oteemo.com"