Configuring Binary Authorization policies
A Binary Authorization policy is a set of rules for determining whether an image can be deployed on a platform. You can define this policy using one of two methods:
- The Google Cloud console
- gcloud commands
The following procedure describes how to do this using the Google Cloud console.
Creating the policy
Follow these steps to configure a Binary Authorization policy:
- From the Google Cloud Console’s main menu, select Security | Binary Authorization.
- Select EDIT POLICY.
Figure 9.27 – The EDIT POLICY dialog
- Select Require attestations and enter the name of the attestor you created in the previous section.
Figure 9.28 – Choosing the default rule for the policy – Require attestations
- Select ADD ATTESTORS.
Figure 9.29 – The Attestors dialog
The Add attestors dialog...
