Deploy-time policy enforcement for GKE, Cloud Run, and Anthos that requires containers to be signed by trusted attestors before they can run, with break-glass bypass, continuous validation at runtime, and Cloud Build integration for automated attestation signing
FluffyStack toolsJurisdictional exposure
Region locations
APACCNEEAEUUKUSOther44 regions across 7 jurisdictions
Sovereign option
Yes — 1 sovereign-flagged region available
Attributes
- Supply Chain Security
- Yes
Sub-services (3)
Policies
Per-cluster or per-project rules defining required attestors and exemptions
Attestors
Named signing authorities used to authorise container images for deployment
Continuous Validation
Runtime re-evaluation of running pods against current policy
Compliance & Certifications
This service is attested for the following frameworks. Always verify with the provider before relying on a specific compliance posture.
Where this runs
44 regions
29 countries
1sovereign
Sovereign regions (1)
- T-Systems Sovereign Cloud · FrankfurtT-Systems Sovereign Cloud powered by Google Cloud
Commercial regions (43)
Europe (13)
- Belgium
- Finland
- Paris
- Berlin
- Frankfurt
- Milan
- Turin
- Netherlands
- Warsaw
- Madrid
- Stockholm
- Zurich
- London
North America (12)
- Montréal
- Toronto
- Querétaro
- Northern Virginia
- Columbus
- Iowa
- Dallas
- Las Vegas
- Los Angeles
- South Carolina
- Salt Lake City
- Oregon
South America (2)
- São Paulo
- Santiago
Asia (10)
- Hong Kong
- Delhi
- Mumbai
- Jakarta
- Osaka
- Tokyo
- Singapore
- Seoul
- Taiwan
- Bangkok
Oceania (2)
- Melbourne
- Sydney
Middle East (3)
- Tel Aviv
- Doha
- Dammam
Africa (1)
- Johannesburg
Tags
Pricing
Pricing model:pay-as-you-go