Quotas and limits

Request rate limits

Binary Authorization enforces the following request rate limits:

Request type Value
Read request 100 per user-project-minute
Update or delete request 20 per user-project-minute
Create request 10 per user-project-minute
Admission review 500 per user-project-minute

Note that Google may send Admission review requests in the background (for example if Binary Authorization policy enforcement is enabled in GKE) and that this will count against the Admission review quota limit.

Resource limits

Binary Authorization also enforces the following limits:

Limit Value
Number of Attestor resources per project 200
Number of Attestor references per Policy 200
Number of Keys per Attestor 1000

Quota increases

If you would like to increase any of the limits, we might like to understand more about your needs. You can submit a Binary Authorization quota request for your project in the Google Cloud console.