[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-08-25 UTC."],[[["\u003cp\u003eThis guide provides instructions on how to disable Binary Authorization on a Google Kubernetes Engine (GKE) cluster.\u003c/p\u003e\n"],["\u003cp\u003eYou can disable Binary Authorization through the Google Cloud console by navigating to your cluster settings and toggling the option to "Disabled".\u003c/p\u003e\n"],["\u003cp\u003eAlternatively, you can use the \u003ccode\u003egcloud\u003c/code\u003e command-line tool to disable it by running an update command with the \u003ccode\u003e--binauthz-evaluation-mode=DISABLED\u003c/code\u003e flag.\u003c/p\u003e\n"],["\u003cp\u003eDisabling Binary Authorization using the provided methods will also disable CV if it was previously enabled.\u003c/p\u003e\n"]]],[],null,["# Disable Binary Authorization (GKE)\n\nThis page explains how to disable Binary Authorization on a cluster running in\nGoogle Kubernetes Engine.\n\nTo disable Binary Authorization on a running cluster, follow these steps. \n\n### Console\n\n1. Open the GKE page in the Google Cloud console.\n\n [Go to GKE](https://console.cloud.google.com/kubernetes/list)\n2. Click the edit button for the name of the cluster where you want to modify.\n The button looks like a pencil.\n\n3. Set **Enable Binary Authorization** to **Disabled**.\n\n4. Click **Save**.\n\n### gcloud\n\nEnter the following: \n\n```\ngcloud beta container clusters update \\\n --project=PROJECT_ID \\\n --binauthz-evaluation-mode=DISABLED \\\n --zone ZONE \\\n CLUSTER_NAME\n```\n\nwhere:\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e is the ID of the project where the cluster is running\n- \u003cvar translate=\"no\"\u003eZONE\u003c/var\u003e is the GKE zone (for example, `us-central1-a`)\n- \u003cvar translate=\"no\"\u003eCLUSTER_NAME\u003c/var\u003e is the name of the cluster you want to create (for example, `test-cluster`)\n\nIf you have CV enabled, running this command disables it.\nFor more information, see [Manage CV platform policies](/binary-authorization/docs/manage-platform-policies)."]]
