Set up overview for Anthos Service Mesh

Preview

This product or feature is covered by the Pre-GA Offerings Terms of the Google Cloud Terms of Service. Pre-GA products and features might have limited support, and changes to pre-GA products and features might not be compatible with other pre-GA versions. For more information, see the launch stage descriptions.

This page provides an overview of how to set up Binary Authorization for use with Anthos Service Mesh.

Before you begin

Before you use Binary Authorization for Anthos Service Mesh, you must first install Anthos Service Mesh on Google Kubernetes Engine (GKE). For more information, see the quickstart or the GKE installation guides.

Setup Steps

To set up Binary Authorization for Anthos Service Mesh, perform the following steps:

1. Enable Binary Authorization.

2. Configure your Binary Authorization policy.

   Note: Skip this step if you want to use attestations.

   You can configure the following features in your policy:

   • Default rule.
   • Specific rules for your Anthos Service Mesh service identity.
   • Exempt images. Learn more about exempt images.

3. Optional: Use the built-by-cloud-build attestor to deploy only images built by Cloud Build (Preview).

4. Optional: Use attestations.