ืืืฃ ืืื ืืืกืืจ ืืื ืืืฆืืจ ืืฉืืื ื-Google Kubernetes Engine โ (GKE) ืขื Binary Authorization ืืืคืขื. ืืืฆืขืื ืืช ืืฉืื ืืื ืืฉืืจืช ืืคืงืืื ืืืืฆืขืืช ืคืงืืืืช gcloud ืื ืืืกืืฃ Google Cloud . ืืฉืื ืืื ืืื ืืืง ืืืืืจืช Binary Authorization ื-GKE.
ืืคื ื ืฉืืชืืืืื
ืืคืขืืืื ืืช Binary Authorization.
ืืคืขืืืื ืืช GKE API, ืื ืืื ืขืืืื ืื ืืืคืขื.
ืชืคืงืืืื ืฉื ืืจืฉืื ืืืคืขืืช ืืืฉืงื API
ืืื ืืืคืขืื ืืืฉืงื API, ืฆืจืื ืืช ืืืจืฉืื
serviceusage.services.enable. ืื ืืฆืจืชื ืืช ืืคืจืืืงื, ืกืืืจ ืืื ืื ืฉืืืจ ืืฉ ืืื ืืช ืืืจืฉืื ืืื ืืจื ืืชืคืงืื 'ืืขืืื' (roles/owner). ืืืจืช, ืชืืืื ืืงืื ืืช ืืืจืฉืื ืืื ืืจื ืืชืคืงืื 'ืืืืื ืืืืฉืง Service Usage' (roles/serviceusage.serviceUsageAdmin). ืืื ืืงืฆืื ืชืคืงืืืืืืืืืจืื ืืืื ืืืช ืคืืืคืืจืื ืืืืฆืขืืช Google Cloud ืืืกืืฃ, ืืื ืฉืืจืช ืืคืงืืื ืื API ืืืจืืืืงืืืจืช REST.
ืืฆืืจืช ืืฉืืื ืขื Binary Authorization ืืืคืขื (ื ืืืืจ CV ืืืื)
ืืชืืื ื Binary Authorization ืคืืขืืช ืขื ืืฉืืืืืช ืืืฆื Autopilot ืื ืืืฆื Standard. ืืื ืืืืืืจ ืืฆื ืืขืจืื ืฉื ื ืืืืจ ืืืื, ืฆืจืื ืืฆืืื ืืคืืืช ืืืื ืืืช ืคืืืคืืจืื ืืืืกืกืช-ืืืืงื ืืืช.
ืืื ืืืฆืืจ ืืฉืืื ืขื Binary Authorization ืฉืืืคืขื ืื ืืขืงื ืืืจื CV ืืืื:
ืืืกืืฃ
ืืฉืืืื ืืืืื ืืืกืืจ ืืื ืืืืืืจ ืืฉืืื ืจืืื.
ื ืื ืกืื ืืืฃ GKE ืืืกืืฃ Google Cloud .
ืืืืฆืื ืขื Create Cluster (ืืฆืืจืช ืืฉืืื). ืืืื ืื ืขืจืืื ืืฉืืืช ืืจืืจืช ืืืืื ืืื ืฉืืชืืืจ ืืืืืจ ืื ืืฉื ืืฆืืจืช ืืฉืืื ืืืืจื.
ืืืืื ืืช ืื ืืืื, ืืงืืข Cluster (ืืฉืืื), ืืืืฆืื ืขื Advanced settings (ืืืืจืืช ืืชืงืืืืช).
ืืฉืืจื Binary authorization ืืืืฆืื ืขื edit Edit configuration.
ืืืืจืื ืืืคืฉืจืืช Binary Authorization.
ืืืืจืื ืืืคืฉืจืืช Audit-only, ืืืืืจืื ืืช ืืืื ืืืช ืืคืืืคืืจืื ืฉืืืืกืกืช ืขื ืืืืงืช CV ืฉืจืืฆืื ืฉ-Binary Authorization ืืืืืง ืืช ืืชืืืืืช ืฉื ืืชืืื ืืช ืืืฉืืื, ืืื ืืืืฆืื ืขื Save.
ืืืืฆืื ืขื ืืฆืืจื.
gcloud
ืืืืืจืื ืืช Google Cloud ืคืจืืืงื ืืจืืจืช ืืืืื:
gcloud config set project PROJECT_ID
ืืืืืคืื ืืช
PROJECT_IDืืืืื ืืคืจืืืงื ืฉืื ืจืืฆืื ืืืฆืืจ ืืช ืืืฉืืื.ืืฆืืจืช ืืฉืืื ืฉืืฉืชืืฉ ืจืง ืืืขืงื ืืืืกืก-ืืืื ืืืช ืฉื ืคืืืคืืจืืช CV:
ืืคื ื ืืฉืืืืฉ ืื ืชืื ื ืืคืงืืื ืืืืื, ืฆืจืื ืืืืืืฃ ืืช ืื ืชืื ืื ืืืืื:
- โซ
CLUSTER_NAME: ืฉื ืืืฉืืื. - โซ
LOCATION: ืืืืงืื โ ืืืืืื,us-central1ืืasia-south1. - โซ
POLICY_PROJECT_ID: ืืืื ืืคืจืืืงื ืฉืื ืืืืืกื ืช ืืืืื ืืืช. POLICY_ID: ืืืื ืืืืื ืืืช.- โซ
CLUSTER_PROJECT_ID: ืืืื ืืคืจืืืงื ืฉื ืืืฉืืื.
ืืจืืฆืื ืืช ืืคืงืืื ืืืื:
โซLinux,โ macOS ืื Cloud Shell
gcloud beta container clusters create CLUSTER_NAME \ --location=LOCATION \ --binauthz-evaluation-mode=POLICY_BINDINGS \ --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID/platforms/gke/policies/POLICY_ID \ --project=CLUSTER_PROJECT_ID
โWindows (PowerShell)
gcloud beta container clusters create CLUSTER_NAME ` --location=LOCATION ` --binauthz-evaluation-mode=POLICY_BINDINGS ` --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID/platforms/gke/policies/POLICY_ID ` --project=CLUSTER_PROJECT_ID
Windowsโ (cmd.exe)
gcloud beta container clusters create CLUSTER_NAME ^ --location=LOCATION ^ --binauthz-evaluation-mode=POLICY_BINDINGS ^ --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID/platforms/gke/policies/POLICY_ID ^ --project=CLUSTER_PROJECT_ID
- โซ
ืืฆืืจืช ืืืฉืืื ืืืืื ืืืืืฉื ืืื ืืงืืช.
ืืฆืืจืช ืืฉืืื ืขื Binary Authorization ืืืคืขื (ืืืืคื ืืืื)
ืืชืืื ื Binary Authorization ืคืืขืืช ืขื ืืฉืืืืืช ืืืฆื Autopilot ืื ืืืฆื Standard. ืืืื ืืืช ืืืืืคื ืืืืืจืช ืืืืื ืืืช ืืคืจืืืงื, ืฉืืืคืฉืจืช ืืืจืืจืช ืืืื ืืช ืื ืืชืืื ืืช. ืืื ืืฉื ืืช ืืช ืืืื ืืืช ืืคืจืืืงื, ืคืืขืืื ืืคื ืืืืจืืืช ืืืื.
ืืื ืืืฆืืจ ืืฉืืื ืขื Binary Authorization ืืืคืขื, ืฉืืืคืขื ืื ืจืง ืืืืคื:
ืืืกืืฃ
ืืฉืืืื ืืืืื ืืืกืืจ ืืื ืืืืืืจ ืืฉืืื ืจืืื.
ื ืื ืกืื ืืืฃ GKE ืืืกืืฃ Google Cloud .
ืืืืฆืื ืขื Create Cluster (ืืฆืืจืช ืืฉืืื). ืืืื ืื ืขืจืืื ืืฉืืืช ืืจืืจืช ืืืืื ืืื ืฉืืชืืืจ ืืืืืจ ืื ืืฉื ืืฆืืจืช ืืฉืืื ืืืืจื.
ืืืืื ืืช ืื ืืืื, ืืงืืข Cluster (ืืฉืืื), ืืืืฆืื ืขื Advanced settings (ืืืืจืืช ืืชืงืืืืช).
ืืฉืืจื Binary authorization ืืืืฆืื ืขื edit Edit configuration.
ืืืืจืื ืืืคืฉืจืืช Binary Authorization.
ืืืืจืื ืืืคืฉืจืืช ืืืืคื ืืืื ืืื ืืืืฆืื ืขื ืฉืืืจื.
ืืืืฆืื ืขื ืืฆืืจื.
gcloud
ืืืืืจืื ืืช Google Cloud ืคืจืืืงื ืืจืืจืช ืืืืื:
gcloud config set project PROJECT_ID
ืืืืืคืื ืืช
PROJECT_IDืืืืื ืืคืจืืืงื ืฉืื ืจืืฆืื ืืืฆืืจ ืืช ืืืฉืืื.ืืฆืืจืช ืืฉืืื ืฉืืฉืชืืฉ ืืืืืคืช ืืืื ืืืช ืืืื:
ืืคื ื ืืฉืืืืฉ ืื ืชืื ื ืืคืงืืื ืืืืื, ืฆืจืื ืืืืืืฃ ืืช ืื ืชืื ืื ืืืืื:
- โซ
CLUSTER_NAME: ืฉื ืืืฉืืื. - โซ
LOCATION: ืืืืงืื โ ืืืืืื,us-central1ืืasia-south1. - โซ
CLUSTER_PROJECT_ID: ืืืื ืืคืจืืืงื ืฉื ืืืฉืืื.
ืืจืืฆืื ืืช ืืคืงืืื ืืืื:
โซLinux,โ macOS ืื Cloud Shell
gcloud beta container clusters create CLUSTER_NAME \ --location=LOCATION \ --binauthz-evaluation-mode=PROJECT_SINGLETON_POLICY_ENFORCE \ --project=CLUSTER_PROJECT_ID
โWindows (PowerShell)
gcloud beta container clusters create CLUSTER_NAME ` --location=LOCATION ` --binauthz-evaluation-mode=PROJECT_SINGLETON_POLICY_ENFORCE ` --project=CLUSTER_PROJECT_ID
Windowsโ (cmd.exe)
gcloud beta container clusters create CLUSTER_NAME ^ --location=LOCATION ^ --binauthz-evaluation-mode=PROJECT_SINGLETON_POLICY_ENFORCE ^ --project=CLUSTER_PROJECT_ID
- โซ
Terraform
ืืืืืื ืืืื ืฉื Terraform ื ืืฆืจ ืืืืืืจ ืืฉืืื Standard:
ืืืืข ื ืืกืฃ ืขื ืฉืืืืฉ ื-Terraform ืืืื ืืืืืจ ืชืืืื ื-Terraform ื-GKE.
ืืฆืืจืช ืืืฉืืื ืืืืื ืืืืืฉื ืืื ืืงืืช.
ืืฆืืจืช ืืฉืืื ืขื Binary Authorization ืืืคืขื (ืืขืงื ืืืืืคื ืฉื CV)
ืืชืืื ื Binary Authorization ืคืืขืืช ืขื ืืฉืืืืืช ืืืฆื Autopilot ืื ืืืฆื Standard.
ืืฆืืจื ืืืืคื, ืืืืื ืืืช ืืืืืจืช ืืืืื ืืืช ืืคืจืืืงื, ืฉืืืคืฉืจืช ืืืจืืจืช ืืืื ืืช ืื ืืชืืื ืืช. ืืื ืืฉื ืืช ืืช ืืืื ืืืช ืืคืจืืืงื, ืคืืขืืื ืืคื ืืืืจืืืช ืืืื.
ืืื ืืืฉืชืืฉ ืืืขืงื ืืืจ CV, ืฆืจืื ืืฆืืื ืืคืืืช ืืืื ืืืช ืคืืืคืืจืื ืฉืืืืกืกืช ืขื ืืืืงืช CV.
ืืื ืืืฆืืจ ืืฉืืื ืขื Binary Authorization ืฉืืืคืขื ืขื ืืขืงื ืืืืืคื ืฉื CV:
ืืืกืืฃ
ืืฉืืืื ืืืืื ืืืกืืจ ืืื ืืืืืืจ ืืฉืืื ืจืืื.
ื ืื ืกืื ืืืฃ GKE ืืืกืืฃ Google Cloud .
ืืืืฆืื ืขื Create Cluster (ืืฆืืจืช ืืฉืืื). ืืืื ืื ืขืจืืื ืืฉืืืช ืืจืืจืช ืืืืื ืืื ืฉืืชืืืจ ืืืืืจ ืื ืืฉื ืืฆืืจืช ืืฉืืื ืืืืจื.
ืืืืื ืืช ืื ืืืื, ืืงืืข Cluster (ืืฉืืื), ืืืืฆืื ืขื Advanced settings (ืืืืจืืช ืืชืงืืืืช).
ืืฉืืจื Binary authorization ืืืืฆืื ืขื edit Edit configuration.
ืืืืจืื ืืืคืฉืจืืช Binary Authorization.
ืืืืจืื ืืืคืฉืจืืช ืืืืงื ืืืืืคื, ืืืืืจืื ืืืื ืืืช ืคืืืคืืจืื ืฉืืืืกืกืช ืขื ืืืืงืช CV ืืื ืืืืฆืื ืขื ืฉืืืจื.
ืืืืฆืื ืขื ืืฆืืจื.
gcloud
ืืืืืจืื ืืช Google Cloud ืคืจืืืงื ืืจืืจืช ืืืืื:
gcloud config set project PROJECT_ID
ืืืืืคืื ืืช PROJECT_ID ืืืืื ืืคืจืืืงื ืฉืื ืจืืฆืื ืืืฆืืจ ืืช ืืืฉืืื.
ืืืฆืจืื ืืฉืืื ืฉืืฉืชืืฉ ืื ืืืืืคืช ืืืื ืืืช ืฉื ืคืจืืืงื ืืืื ืืื ืืืขืงื ืืืืกืก-ืืืื ืืืช ืฉื ืคืืืคืืจืืช CV:
ืืคื ื ืืฉืืืืฉ ืื ืชืื ื ืืคืงืืื ืืืืื, ืฆืจืื ืืืืืืฃ ืืช ืื ืชืื ืื ืืืืื:
- โซ
CLUSTER_NAME: ืฉื ืืืฉืืื. - โซ
LOCATION: ืืืืงืื โ ืืืืืื,us-central1ืืasia-south1. - โซ
POLICY_PROJECT_ID: ืืืื ืืคืจืืืงื ืฉืื ืืืืืกื ืช ืืืืื ืืืช. POLICY_ID: ืืืื ืืืืื ืืืช.- โซ
CLUSTER_PROJECT_ID: ืืืื ืืคืจืืืงื ืฉื ืืืฉืืื.
ืืจืืฆืื ืืช ืืคืงืืื ืืืื:
โซLinux,โ macOS ืื Cloud Shell
gcloud beta container clusters create CLUSTER_NAME \ --location=LOCATION \ --binauthz-evaluation-mode=POLICY_BINDINGS_AND_PROJECT_SINGLETON_POLICY_ENFORCE \ --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID/platforms/gke/policies/POLICY_ID \ --project=CLUSTER_PROJECT_ID
โWindows (PowerShell)
gcloud beta container clusters create CLUSTER_NAME ` --location=LOCATION ` --binauthz-evaluation-mode=POLICY_BINDINGS_AND_PROJECT_SINGLETON_POLICY_ENFORCE ` --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID/platforms/gke/policies/POLICY_ID ` --project=CLUSTER_PROJECT_ID
Windowsโ (cmd.exe)
gcloud beta container clusters create CLUSTER_NAME ^ --location=LOCATION ^ --binauthz-evaluation-mode=POLICY_BINDINGS_AND_PROJECT_SINGLETON_POLICY_ENFORCE ^ --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID/platforms/gke/policies/POLICY_ID ^ --project=CLUSTER_PROJECT_ID
- โซ
ืืฆืืจืช ืืืฉืืื ืืืืื ืืืืืฉื ืืื ืืงืืช.
ืืฆืืจืช ืืฉืืื CV ืฉืืฉืชืืฉ ืืืื ืืืื ืืืื ืืืช ืฉื ืคืืืคืืจืื (ืืขืงื ืืืจื CV ืืืื)
ืืชืืื ื Binary Authorization ืคืืขืืช ืขื ืืฉืืืืืช ืืืฆื Autopilot ืื ืืืฆื Standard.
ืืคืฉืจ ืืืฆืืจ ืืฉืืืืืช ืขื ืืื ืืืื ืืืช ืคืืืคืืจืื ืฉืืฉืืืืช ืืืืื (ืืืืข ื ืืกืฃ ืืืื ืืืืืจื ืืขืืจื ืฉื ื-API ืฉื GKE).
ืืืกืืฃ
ืืฉืืืื ืืืืื ืืืกืืจ ืืื ืืืืืืจ ืืฉืืื ืจืืื.
ื ืื ืกืื ืืืฃ GKE ืืืกืืฃ Google Cloud .
ืืืืฆืื ืขื Create Cluster (ืืฆืืจืช ืืฉืืื). ืืืื ืื ืขืจืืื ืืฉืืืช ืืจืืจืช ืืืืื ืืื ืฉืืชืืืจ ืืืืืจ ืื ืืฉื ืืฆืืจืช ืืฉืืื ืืืืจื.
ืืืืื ืืช ืื ืืืื, ืืงืืข Cluster (ืืฉืืื), ืืืืฆืื ืขื Advanced settings (ืืืืจืืช ืืชืงืืืืช).
ืืฉืืจื Binary authorization ืืืืฆืื ืขื edit Edit configuration.
ืืืืจืื ืืืคืฉืจืืช Binary Authorization.
ืืืืจืื ืืืคืฉืจืืช Audit-only (ืืืงืืจืช ืืืื), ืืืืืจืื ืืืื ืืืช ืคืืืคืืจืื ืืืช ืื ืืืชืจ ืฉืจืืฆืื ืฉ-Binary Authorization ืชืืืืง ืืช ืืืฉืืื ืืคืื, ืืื ืืืืฆืื ืขื Save (ืฉืืืจื).
ืืืืฆืื ืขื ืืฆืืจื.
gcloud
ืืืืืจืื ืืช Google Cloud ืคืจืืืงื ืืจืืจืช ืืืืื:
gcloud config set project PROJECT_ID
ืืืฆืจืื ืืช ืืืฉืืื.
ืืคื ื ืืฉืืืืฉ ืื ืชืื ื ืืคืงืืื ืืืืื, ืฆืจืื ืืืืืืฃ ืืช ืื ืชืื ืื ืืืืื:
- โซ
CLUSTER_NAME: ืฉื ืืืฉืืื. - โซ
LOCATION: ืืืืงืื โ ืืืืืื,us-central1ืืasia-south1. - โซ
POLICY_PROJECT_ID_1: ืืืื ืืคืจืืืงื ืฉืื ืืืืืกื ืช ืืืื ืืืช ืืคืืืคืืจืื ืืจืืฉืื ื. - โซ
POLICY_ID_1: ืืืื ืืืืื ืืืช ืฉื ืืืืื ืืืช ืืจืืฉืื ื ืืคืืืคืืจืื. - โซ
POLICY_PROJECT_ID_2: ืืืื ืืคืจืืืงื ืฉืื ืืืืืกื ืช ืืืื ืืืช ืืคืืืคืืจืื ืืฉื ืืื. ืืคืฉืจ ืืืืกื ืืื ืืืื ืืืื ืืืช ืืืืชื ืคืจืืืงื ืื ืืคืจืืืงืืื ืฉืื ืื. - โซ
POLICY_ID_2: ืืืื ืืืืื ืืืช ืฉื ืืืืื ืืืช ืืฉื ืืื ืืคืืืคืืจืื. - โซ
CLUSTER_PROJECT_ID: ืืืื ืืคืจืืืงื ืฉื ืืืฉืืื.
ืืจืืฆืื ืืช ืืคืงืืื ืืืื:
โซLinux,โ macOS ืื Cloud Shell
gcloud beta container clusters create CLUSTER_NAME \ --location=LOCATION \ --binauthz-evaluation-mode=POLICY_BINDINGS \ --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID_1/platforms/gke/policies/POLICY_ID_1 \ --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID_2/platforms/gke/policies/POLICY_ID_2 \ --project=CLUSTER_PROJECT_ID
โWindows (PowerShell)
gcloud beta container clusters create CLUSTER_NAME ` --location=LOCATION ` --binauthz-evaluation-mode=POLICY_BINDINGS ` --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID_1/platforms/gke/policies/POLICY_ID_1 ` --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID_2/platforms/gke/policies/POLICY_ID_2 ` --project=CLUSTER_PROJECT_ID
Windowsโ (cmd.exe)
gcloud beta container clusters create CLUSTER_NAME ^ --location=LOCATION ^ --binauthz-evaluation-mode=POLICY_BINDINGS ^ --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID_1/platforms/gke/policies/POLICY_ID_1 ^ --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID_2/platforms/gke/policies/POLICY_ID_2 ^ --project=CLUSTER_PROJECT_ID
- โซ
ืืฆืืจืช ืืืฉืืื ืืืืื ืืืืืฉื ืืื ืืงืืช.
ืืฆืืจืช ืืฉืืื CV ืฉืืฉืชืืฉ ืืืื ืืืื ืืืช ืคืืืคืืจืื (ืืขืงื ืืืืืคื ืฉื CV)
ืืชืืื ื Binary Authorization ืคืืขืืช ืขื ืืฉืืืืืช ืืืฆื Autopilot ืื ืืืฆื Standard.
ืืคืฉืจ ืืืฆืืจ ืืฉืืืืืช ืขื ืืื ืืืื ืืืช ืคืืืคืืจืื ืฉืืฉืืืืช ืืืืื (ืืืืข ื ืืกืฃ ืืืื ืืืืืจื ืืขืืจื ืฉื ื-API ืฉื GKE).
ืืืกืืฃ
ืืฉืืืื ืืืืื ืืืกืืจ ืืื ืืืืืืจ ืืฉืืื ืจืืื.
ื ืื ืกืื ืืืฃ GKE ืืืกืืฃ Google Cloud .
ืืืืฆืื ืขื Create Cluster (ืืฆืืจืช ืืฉืืื). ืืืื ืื ืขืจืืื ืืฉืืืช ืืจืืจืช ืืืืื ืืื ืฉืืชืืืจ ืืืืืจ ืืฆืืจืช ืืฉืืื ืืืืจื.
ืืืืื ืืช ืื ืืืื, ืืงืืข Cluster (ืืฉืืื), ืืืืฆืื ืขื Advanced settings (ืืืืจืืช ืืชืงืืืืช).
ืืฉืืจื Binary authorization ืืืืฆืื ืขื edit Edit configuration.
ืืืืจืื ืืืคืฉืจืืช Binary Authorization.
ืืืืจืื ืืืคืฉืจืืช ืืืืงื ืืืืืคื, ืืืืืจืื ืืช ืืืื ืืืช ืืืขืงื ืืืจ CV ืืืืืฆืื ืขื ืฉืืืจื.
ืืืืฆืื ืขื ืืฆืืจื.
gcloud
ืืืืืจืื ืืช Google Cloud ืคืจืืืงื ืืจืืจืช ืืืืื:
gcloud config set project PROJECT_ID
ืืืฆืจืื ืืฉืืื ืฉืืฉืชืืฉ ืื ืืืืืคืช ืืืื ืืืช ืฉื ืคืจืืืงื ืืืื ืืื ืืืขืงื ืืืืกืก-ืืืื ืืืช ืฉื ืคืืืคืืจืืช CV:
ืืคื ื ืืฉืืืืฉ ืื ืชืื ื ืืคืงืืื ืืืืื, ืฆืจืื ืืืืืืฃ ืืช ืื ืชืื ืื ืืืืื:
- โซ
CLUSTER_NAME: ืฉื ืืืฉืืื. - โซ
LOCATION: ืืืืงืื โ ืืืืืื,us-central1ืืasia-south1. - โซ
POLICY_PROJECT_ID_1: ืืืื ืืคืจืืืงื ืฉืื ืืืืืกื ืช ืืืื ืืืช ืืคืืืคืืจืื ืืจืืฉืื ื. - โซ
POLICY_ID_1: ืืืื ืืืืื ืืืช ืฉื ืืืืื ืืืช ืืจืืฉืื ื ืืคืืืคืืจืื. - โซ
POLICY_PROJECT_ID_2: ืืืื ืืคืจืืืงื ืฉืื ืืืืืกื ืช ืืืื ืืืช ืืคืืืคืืจืื ืืฉื ืืื. ืืคืฉืจ ืืืืกื ืืื ืืืื ืืืื ืืืช ืืืืชื ืคืจืืืงื ืื ืืคืจืืืงืืื ืฉืื ืื. - โซ
POLICY_ID_2: ืืืื ืืืืื ืืืช ืฉื ืืืืื ืืืช ืืฉื ืืื ืืคืืืคืืจืื. - โซ
CLUSTER_PROJECT_ID: ืืืื ืืคืจืืืงื ืฉื ืืืฉืืื.
ืืจืืฆืื ืืช ืืคืงืืื ืืืื:
โซLinux,โ macOS ืื Cloud Shell
gcloud beta container clusters create CLUSTER_NAME \ --location=LOCATION \ --binauthz-evaluation-mode=POLICY_BINDINGS_AND_PROJECT_SINGLETON_POLICY_ENFORCE \ --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID_1/platforms/gke/policies/POLICY_ID_1 \ --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID_2/platforms/gke/policies/POLICY_ID_2 \ --project=CLUSTER_PROJECT_ID
โWindows (PowerShell)
gcloud beta container clusters create CLUSTER_NAME ` --location=LOCATION ` --binauthz-evaluation-mode=POLICY_BINDINGS_AND_PROJECT_SINGLETON_POLICY_ENFORCE ` --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID_1/platforms/gke/policies/POLICY_ID_1 ` --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID_2/platforms/gke/policies/POLICY_ID_2 ` --project=CLUSTER_PROJECT_ID
Windowsโ (cmd.exe)
gcloud beta container clusters create CLUSTER_NAME ^ --location=LOCATION ^ --binauthz-evaluation-mode=POLICY_BINDINGS_AND_PROJECT_SINGLETON_POLICY_ENFORCE ^ --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID_1/platforms/gke/policies/POLICY_ID_1 ^ --binauthz-policy-bindings=name=projects/POLICY_PROJECT_ID_2/platforms/gke/policies/POLICY_ID_2 ^ --project=CLUSTER_PROJECT_ID
- โซ
ืืฆืืจืช ืืืฉืืื ืืืืื ืืืืืฉื ืืื ืืงืืช.
ืืืืืช ืฉืืชืืื ื 'ืืจืฉืืช ืงืืฆืื ืืื ืืจืืื' ืืืคืขืืช
ืืื ืืืืื ืฉืืชืืื ื 'ืืืฉืืจ ืืื ืืจื' ืืืคืขืืช ืืืฉืืื:
ืืืกืืฃ
ืคืืชืืื ืืช ืืืฃ GKE ืืืกืืฃ Google Cloud .
ืืงืืข Kubernetes clusters, ืืืฆืืื ืืช ืืืฉืืื.
ืืงืืข ืืืืื, ืืืืืืื ืฉืืืคืฉืจืืช ืืืฉืืจ ืืื ืืจื ืืืืืจืช ืืืืคืขื.
gcloud
ืืื ืืืฆืื ืืช ืงืืฉืืจื ืืืืื ืืืช ืฉื ืืืฉืืื:
gcloud beta container clusters describe CLUSTER_NAME --location LOCATION --project CLUSTER_PROJECT_ID | grep -A 10 policyBindings:
ืฉืืื ืื: ืืืื ืืืืืช ืฉืืืคืืข ืืืืข ื ืืกืฃ ืืืจื ืจืฉืืืช ืืืืื ืืืช ืืืืืืืช.
ืืืืืจืื ืืืืื
- ืืืืข ื ืืกืฃ ืขื ืืืืืช ืจืฆืืฃ ื-Binary Authorization (ืืจืกืช Preview)
- ืืืืข ื ืืกืฃ ืขื ืืืืคืช Binary Authorization