Mengaktifkan layanan Otorisasi Biner

Halaman ini menjelaskan cara mengaktifkan Otorisasi Biner di project deployer Anda.

Pertama, Anda membuat atau memilih project. Anda mengaktifkan Otorisasi Biner di projectGoogle Cloud tempat Anda men-deploy container. Project ini sama dengan project tempat Anda menjalankan platform yang didukung, seperti Google Kubernetes Engine (GKE), Cloud Run, atau Google Distributed Cloud.

Untuk mengaktifkan Otorisasi Biner, ikuti langkah-langkah berikut:

Sign in to your Google Cloud account. If you're new to Google Cloud, create an account to evaluate how our products perform in real-world scenarios. New customers also get $300 in free credits to run, test, and deploy workloads.

In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

Roles required to select or create a project

• Select a project: Selecting a project doesn't require a specific IAM role—you can select any project that you've been granted a role on.
• Create a project: To create a project, you need the Project Creator (roles/resourcemanager.projectCreator), which contains the resourcemanager.projects.create permission. Learn how to grant roles.

Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.

Go to project selector

Verify that billing is enabled for your Google Cloud project.

Enable the Binary Authorization API.

Roles required to enable APIs

To enable APIs, you need the Service Usage Admin IAM role (roles/serviceusage.serviceUsageAdmin), which contains the serviceusage.services.enable permission. Learn how to grant roles.

Enable the API

Install the Google Cloud CLI.

Jika Anda menggunakan penyedia identitas (IdP) eksternal, Anda harus login ke gcloud CLI dengan identitas gabungan Anda terlebih dahulu.

Untuk melakukan inisialisasi gcloud CLI, jalankan perintah berikut:

gcloud init

In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

Roles required to select or create a project

• Select a project: Selecting a project doesn't require a specific IAM role—you can select any project that you've been granted a role on.
• Create a project: To create a project, you need the Project Creator (roles/resourcemanager.projectCreator), which contains the resourcemanager.projects.create permission. Learn how to grant roles.

Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.

Go to project selector

Verify that billing is enabled for your Google Cloud project.

Enable the Binary Authorization API.

Roles required to enable APIs

To enable APIs, you need the Service Usage Admin IAM role (roles/serviceusage.serviceUsageAdmin), which contains the serviceusage.services.enable permission. Learn how to grant roles.

Enable the API

Install the Google Cloud CLI.

Jika Anda menggunakan penyedia identitas (IdP) eksternal, Anda harus login ke gcloud CLI dengan identitas gabungan Anda terlebih dahulu.

Untuk melakukan inisialisasi gcloud CLI, jalankan perintah berikut:

gcloud init

Otorisasi Biner diaktifkan. Sekarang Anda dapat menyiapkannya dengan platform pengelolaan penampung.

Peringatan: Jika Anda menghapus Agen Layanan Otorisasi Biner atau mengubah perannya, Otorisasi Biner akan gagal karena izin tidak ada.

Langkah berikutnya

• Menyiapkan validasi berkelanjutan Otorisasi Biner dengan GKE (Pratinjau)
• Menyiapkan penerapan Otorisasi Biner dengan GKE
• Menyiapkan Otorisasi Biner dengan Cloud Run
• Menyiapkan Otorisasi Biner dengan Distributed Cloud