Open device management
Add digests to container and init container images in Kubernetes pod and pod template specs. Use either as a mutating admission webhook, or as a client-side KRM function with kpt or kustomize.
This repository guides you through deploying a private GKE cluster and provides a base platform for hands-on exploration of several GKE related topics which leverage or integrate with that infrastructure. After completing the exercises in all topic areas, you will have a deeper understanding of several core components of GKE and GCP as configure…
A proof-of-concept Linux clone of Santa, Google's binary authorization system for macOS
Google-native secure delivery platform for GKE, built with Cloud Build, Cloud Deploy, Binary Authorization, Terraform, and Cloud Operations
Sync server for Santa, the binary authorization system for macOS
Ensure only Container Images created as part of your CI step are deployed
Gatekeeper, a multi-tenant RAG assistant, deployed into a zero-egress GCP enclave: private GKE and Cloud SQL, Gemini on Vertex AI through restricted APIs, signed images enforced by Binary Authorization, offline bundles, and drilled upgrades, failover and restore.
Four Pulumi/GCP patterns where a subtle IaC mistake is a security incident — authoritative IAM, keyless CI (WIF), click-ops adoption, BinAuthz.
To associate your repository with the binary-authorization topic, visit your repo's landing page and select "manage topics."