Stay organized with collections Save and categorize content based on your preferences.
This page provides an overview of how to set up Binary Authorization enforcement in your environment for use with Google Kubernetes Engine (GKE). You can set up Binary Authorization by using the Google Cloud console or the Google Cloud CLI. You can also perform some setup steps by using the Binary Authorization REST API.
For an end-to-end tutorial that includes the following setup steps, see Get started using the Google Cloud CLI or Get started using the Google Cloud console.
To set up Binary Authorization, perform the following steps:
Create a cluster with Binary Authorization enabled or enable Binary Authorization on an existing cluster.
Note: Binary Authorization doesn't enforce init containers.Configure your Binary Authorization policy.
Note: Skip this step if you want to use attestations.You can configure the following features in your policy:
Optional: If you have different Google Cloud projects that own your policy or your Container Registry repositories, grant the IAM roles required for cross-project access. For instructions, see Configure cross-project access for Binary Authorization in GKE.
Optional: Use the built-by-cloud-build attestor to deploy only images built by Cloud Build.
Optional: Use attestations.
Except as otherwise noted, the content of this page is licensed under the Creative Commons Attribution 4.0 License, and code samples are licensed under the Apache 2.0 License. For details, see the Google Developers Site Policies. Java is a registered trademark of Oracle and/or its affiliates.
Last updated 2025-08-07 UTC.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-07 UTC."],[[["This guide explains how to set up Binary Authorization enforcement for Google Kubernetes Engine (GKE) using the Google Cloud console, Google Cloud CLI, or the Binary Authorization REST API."],["Setting up Binary Authorization involves enabling the service, creating or modifying a cluster, and configuring the Binary Authorization policy with options for default rules, cluster-specific rules, and exempt images."],["Optional configurations include granting cross-project access, using the `built-by-cloud-build` attestor for Cloud Build images, and utilizing attestations."],["The process includes steps for deploying container images and viewing events in Cloud Audit Logs."],["Binary Authorization does not enforce init containers."]]],[]]
RetroSearch is an open source project built by @garambo | Open a GitHub Issue
Search and Browse the WWW like it's 1997 | Search results from DuckDuckGo
HTML:
3.2
| Encoding:
UTF-8
| Version:
0.7.4