certificate-bound tokens

Related topics

• certificate-bound tokens works with Cloud Run From the official documentation: “This requirement helps ensure that only the intended, trusted runtime environment, such as a Cloud Run container or a Google Kubernetes Engine (GKE) Pod, can use the certificate-bound tokens.”
• certificate-bound tokens depends on Demonstrating Proof of Possession From the official documentation: “3. **Autonomous egress path (agent identity):** When the agent calls Google Cloud APIs or machine-to-machine endpoints on its own authority, it authenticates using certificate-bound tokens enforced by mutual TLS (mTLS) and Demonstrating Proof of Possession (DPoP), OIDC ID…”
• certificate-bound tokens works with Google Kubernetes Engine (GKE) From the official documentation: “This requirement helps ensure that only the intended, trusted runtime environment, such as a Cloud Run container or a Google Kubernetes Engine (GKE) Pod, can use the certificate-bound tokens.”
• Binary Authorization secures Cloud Run From the official documentation: “Binary Authorization is a software supply chain security product for GKE and Cloud Run.”
• Binary Authorization works with Cloud Run From the official documentation: “This guide shows you how to disable Binary Authorization for Cloud Run.”
• Agent Gateway works with Cloud Run From the official documentation: “When you host agents or MCP servers on Cloud Run, configure [Agent Platform features for Cloud Run](/run/docs/ai/agent-platform-features) to assign a managed agent identity to the service, and use [IAP](/gemini-enterprise-agent-platform/govern/policies/iap-cloud-run-mcp) with…”
• Agent Gateway works with Demonstrating Proof of Possession From the official documentation: “When agents interact across the Agent Gateway, they also use Demonstrating Proof of Possession (DPoP), creating double-bound credentials for end-to-end security.”
• Binary Authorization works with Google Kubernetes Engine (GKE) From the official documentation: “If you use Google Kubernetes Engine (GKE) or Cloud Run, you can establish an approval process by using [Binary Authorization](/binary-authorization/docs/overview).”
• Cloud Run is an alternative to Google Kubernetes Engine (GKE) From the official documentation: “The architecture shows [Cloud Run](/run/docs/configuring/services/gpu-best-practices) and [GKE](/kubernetes-engine/docs/concepts/machine-learning/inference) as alternative runtimes for the AI model that you choose to use.”