Mengaktifkan layanan Otorisasi Biner

Halaman ini menjelaskan cara mengaktifkan Otorisasi Biner di project deployer Anda.

Pertama, Anda membuat atau memilih project. Anda mengaktifkan Otorisasi Biner di projectGoogle Cloud tempat Anda men-deploy container. Project ini sama dengan project tempat Anda menjalankan platform yang didukung, seperti Google Kubernetes Engine (GKE), Cloud Run, atau Google Distributed Cloud.

Untuk mengaktifkan Otorisasi Biner, ikuti langkah-langkah berikut:

Login ke akun Google Cloud Anda. Jika Anda baru menggunakan Google Cloud, buat akun untuk mengevaluasi performa produk kami dalam skenario dunia nyata. Pelanggan baru juga mendapatkan kredit gratis senilai $300 untuk menjalankan, menguji, dan men-deploy workload.

In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

Roles required to select or create a project

• Select a project: Selecting a project doesn't require a specific IAM role—you can select any project that you've been granted a role on.
• Create a project: To create a project, you need the Project Creator role (roles/resourcemanager.projectCreator), which contains the resourcemanager.projects.create permission. Learn how to grant roles.

Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.

Go to project selector

Verify that billing is enabled for your Google Cloud project.

Enable the Binary Authorization API.

Roles required to enable APIs

To enable APIs, you need the Service Usage Admin IAM role (roles/serviceusage.serviceUsageAdmin), which contains the serviceusage.services.enable permission. Learn how to grant roles.

Enable the API

Instal Google Cloud CLI.

Jika Anda menggunakan penyedia identitas (IdP) eksternal, Anda harus login ke gcloud CLI dengan identitas gabungan Anda terlebih dahulu.

Untuk melakukan inisialisasi gcloud CLI, jalankan perintah berikut:

gcloud init

In the Google Cloud console, on the project selector page, select or create a Google Cloud project.

Roles required to select or create a project

• Select a project: Selecting a project doesn't require a specific IAM role—you can select any project that you've been granted a role on.
• Create a project: To create a project, you need the Project Creator role (roles/resourcemanager.projectCreator), which contains the resourcemanager.projects.create permission. Learn how to grant roles.

Note: If you don't plan to keep the resources that you create in this procedure, create a project instead of selecting an existing project. After you finish these steps, you can delete the project, removing all resources associated with the project.

Go to project selector

Verify that billing is enabled for your Google Cloud project.

Enable the Binary Authorization API.

Roles required to enable APIs

To enable APIs, you need the Service Usage Admin IAM role (roles/serviceusage.serviceUsageAdmin), which contains the serviceusage.services.enable permission. Learn how to grant roles.

Enable the API

Instal Google Cloud CLI.

Jika Anda menggunakan penyedia identitas (IdP) eksternal, Anda harus login ke gcloud CLI dengan identitas gabungan Anda terlebih dahulu.

Untuk melakukan inisialisasi gcloud CLI, jalankan perintah berikut:

gcloud init

Otorisasi Biner diaktifkan. Anda kini dapat menyiapkannya dengan platform pengelolaan kontainer.

Peringatan: Jika Anda menghapus Agen Layanan Otorisasi Biner atau mengubah perannya, Otorisasi Biner akan gagal karena izin yang kurang.

Langkah berikutnya

• Menyiapkan validasi berkelanjutan Otorisasi Biner dengan GKE (Pratinjau)
• Menyiapkan penerapan Otorisasi Biner dengan GKE
• Menyiapkan Otorisasi Biner dengan Cloud Run
• Menyiapkan Otorisasi Biner dengan Distributed Cloud