Setting up attestations
An attestation is a digital document that certifies a container image. During deployment, Binary Authorization verifies the attestation using the attestor’s public key before allowing the image to be deployed. An attestation is created after an image is built using a private key.
Creating an attestation
Follow these steps to create an attestation:
- Copy the resource name of the key you created earlier:
Figure 9.18 – Getting the resource name of the key
- Select Security | Binary Authorization and under Binary Authorization setup, select CREATE ATTESTORS:
Figure 9.19 – Using Binary Authorization setup to start creating an attestor
- Provide Name and description values for the attestor. There is also a built-in attestor called built-by-cloud-build attestor. This attestor does as you’d expect – it can be used to ensure that only images are...
