Adding Trust All Google-Provided System Images to a Binary Authorization policy should add the image paths for Calico. For example "gcr.io/projectcalico-org/typha:" and "gcr.io/projectcalico-org/typha@".
How this might work:
Following this documentation [1], when checking the option "Trust All Google-Provided System Images" in the Images Exempt from Deployment Rules section should add automatically add the path for calico system images
If applicable, reasons why alternative solutions are not sufficient:
Adding the paths for calico manually its not intuitive, as GKE works with Calico.
Other information (workarounds you have tried, documentation consulted, etc):
Description
What you would like to accomplish:
Adding Trust All Google-Provided System Images to a Binary Authorization policy should add the image paths for Calico. For example "gcr.io/projectcalico-org/typha:" and "gcr.io/projectcalico-org/typha@".
How this might work:
Following this documentation [1], when checking the option "Trust All Google-Provided System Images" in the Images Exempt from Deployment Rules section should add automatically add the path for calico system images
If applicable, reasons why alternative solutions are not sufficient:
Adding the paths for calico manually its not intuitive, as GKE works with Calico.
Other information (workarounds you have tried, documentation consulted, etc):
[1] -https://cloud.google.com/binary-authorization/docs/configuring-policy-console#manage_exempt_images