Skip to main content
Google Cloud Documentation
Documentation
  • Get Started
  • Get Started with Google Cloud
  • Product List
  • Cloud Customer Care
  • Featured Products
  • Agent Platform
  • Apigee API Management
  • BigQuery
  • Compute Engine
  • Cloud CDN
  • Cloud Run
  • Cloud Storage
  • Cloud SQL
  • Gemini Enterprise
  • Google Kubernetes Engine
  • Looker
  • Cross-product Tools
  • Access and resources management
  • Costs and usage management
  • Infrastructure as code
  • SDK, languages, frameworks, and tools
  • Technology Areas
  • AI and ML
  • Application development
  • Application hosting
  • Compute
  • Data analytics and pipelines
  • Databases
  • Distributed, hybrid, and multicloud
  • Industry solutions
  • Migration
  • Networking
  • Observability and monitoring
  • Security
  • Storage
/
Console
  • English
  • Deutsch
  • Español
  • Español – América Latina
  • Français
  • Indonesia
  • Italiano
  • Português
  • Português – Brasil
  • עברית
  • 中文 – 简体
  • 中文 – 繁體
  • 日本語
  • 한국어
Sign in
  • Binary Authorization
Start free
Overview Guides Reference Support Resources
Google Cloud Documentation
  • Documentation
    • More
    • Overview
    • Guides
    • Reference
    • Support
    • Resources
  • Console
  • Binary Authorization
  • Product overview
  • Software supply chain security
  • About Binary Authorization
  • Binary Authorization concepts
  • GA migration guide
  • Explore
  • Quickstarts
    • Continuous validation monitoring
      • Monitor Pod security with continuous validation
    • Enforcement
      • Allow all and disallow all (GKE)
      • Allow all and disallow all (Cloud Run)
      • Exempt images (GKE)
  • Tutorials
    • Get started using the command-line interface
    • Get started using the Cloud console
    • Configure a multi-project setup
  • Get started
  • Set up Binary Authorization
    • Enable the service
    • Set up by platform
    • Set up for GKE
      • Overview
      • Configure cross-project access in GKE
      • Create a cluster
      • Enable enforcement on an existing cluster
    • Set up for Cloud Run
      • Overview
      • Enable Binary Authorization
      • Require Binary Authorization
    • Set up for clusters outside Google Cloud
      • Google Distributed Cloud overview
      • Set up for on-premises clusters
    • Set up for Service Mesh
      • Overview
  • Use attestations to deploy signed images
    • Overview
    • Deploy only images built by Cloud Build
    • Create attestors
      • Use the command-line interface
      • Use the Cloud console
      • Use the REST API
    • Create attestations
    • View related tutorials
      • Create attestations with Cloud Build
      • Create attestations with OpenSSF Scorecard
  • Configure a policy
    • Use the command-line interface
    • Use the Cloud console
    • Use the REST API
  • Operate and maintain
  • Deploy
    • Deploy containers (GKE, Google Distributed Cloud)
    • Use breakglass (GKE, Google Distributed Cloud)
    • Use breakglass (Cloud Run)
    • Enable dry run mode
  • Disable Binary Authorization
    • On a GKE cluster
    • For Cloud Run
  • Use continuous validation
    • Continuous validation overview
    • Use the policy evaluation service
    • Require continuous validation check-based platform policies for GKE
    • Use the image freshness check
    • Use the simple signing attestation check
    • Use the Sigstore signature check
    • Use the SLSA check
    • Use the trusted directory check
    • Use the vulnerability check
    • Manage platform policies
    • Enable at fleet level
    • Use legacy continuous validation
    • View continuous validation logs
  • Secure with VPC Service Controls
  • Use custom organization policies
  • Integrate with third-party tools
  • Log and monitor
  • Audit logging overview
  • View audit logs
    • GKE
    • Cloud Run
    • Google Distributed Cloud
  • Monitor metrics (Google Distributed Cloud)
  • Get Started
  • Get Started with Google Cloud
  • Product List
  • Cloud Customer Care
  • Featured Products
  • Agent Platform
  • Apigee API Management
  • BigQuery
  • Compute Engine
  • Cloud CDN
  • Cloud Run
  • Cloud Storage
  • Cloud SQL
  • Gemini Enterprise
  • Google Kubernetes Engine
  • Looker
  • Cross-product Tools
  • Access and resources management
  • Costs and usage management
  • Infrastructure as code
  • SDK, languages, frameworks, and tools
  • Technology Areas
  • AI and ML
  • Application development
  • Application hosting
  • Compute
  • Data analytics and pipelines
  • Databases
  • Distributed, hybrid, and multicloud
  • Industry solutions
  • Migration
  • Networking
  • Observability and monitoring
  • Security
  • Storage
  • Home
  • Documentation
  • Security
  • Binary Authorization
  • Guides

Get started using the Google Cloud CLI (GKE) Stay organized with collections Save and categorize content based on your preferences.

Note: This tutorial assumes that you have read the Binary Authorization overview.

This tutorial shows how to configure and test a Binary Authorization policy that requires