diff --git a/README.md b/README.md
index 08903f1..0bcfe80 100644
--- a/README.md
+++ b/README.md
@@ -32,11 +32,13 @@ $ docker run -ti --rm registry.gitlab.com/zimbatm/docker-nixpkgs/curl http://ifc
 
 ## List of images
 
-| Image        | Description                |
-| ---          | ---                        |
-| curl         | just curl as an entrypoint |
-| nix          | nix with deps              |
-| nix-unstable | nixUnstable with deps      |
+| Image           | Description           |
+| ---             | ---                   |
+| curl            | CLI only              |
+| kubectl         | CLI only              |
+| kubernetes-helm | CLI only              |
+| nix             | nix with deps         |
+| nix-unstable    | nixUnstable with deps |
 
 ## Channels
 
diff --git a/kubectl/default.nix b/kubectl/default.nix
new file mode 100644
index 0000000..115386a
--- /dev/null
+++ b/kubectl/default.nix
@@ -0,0 +1,20 @@
+{ dockerTools
+, cacert
+, kubectl
+}:
+dockerTools.buildImage {
+  inherit (kubectl) name;
+
+  contents = [
+    cacert
+    kubectl
+  ];
+
+  config = {
+    Entrypoint = [ "/bin/kubectl" ];
+    Env = [
+      "PATH=/bin"
+      "SSL_CERT_FILE=${cacert}/etc/ssl/certs/ca-bundle.crt"
+    ];
+  };
+}
diff --git a/kubernetes-helm/default.nix b/kubernetes-helm/default.nix
new file mode 100644
index 0000000..ea32054
--- /dev/null
+++ b/kubernetes-helm/default.nix
@@ -0,0 +1,20 @@
+{ dockerTools
+, cacert
+, kubernetes-helm
+}:
+dockerTools.buildImage {
+  inherit (kubernetes-helm) name;
+
+  contents = [
+    cacert
+    kubernetes-helm
+  ];
+
+  config = {
+    Entrypoint = [ "/bin/helm" ];
+    Env = [
+      "PATH=/bin"
+      "SSL_CERT_FILE=${cacert}/etc/ssl/certs/ca-bundle.crt"
+    ];
+  };
+}
diff --git a/overlay.nix b/overlay.nix
index c470f75..13d21b7 100644
--- a/overlay.nix
+++ b/overlay.nix
@@ -1,14 +1,12 @@
 _: pkgs: {
+  # docker images must be lower-cased
   docker-nixpkgs = rec {
 
     curl = pkgs.callPackage ./curl {};
-
+    kubectl = pkgs.callPackage ./kubectl {};
+    kubernetes-helm = pkgs.callPackage ./kubernetes-helm {};
     nix = pkgs.callPackage ./nix {};
-
-    # docker images must be lower-cased
-    nix-unstable = nix.overrideAttrs (self: { 
-      nix = pkgs.nixUnstable;
-    });
+    nix-unstable = nix.overrideAttrs (self: { nix = pkgs.nixUnstable; });
 
   };
 }