We use as much of built-in gcp stuff as is reasonable but unfortunately there’s no “make things secure” button yet.

Additionally not all gcp components work well with each other as soon as you start using anything beyond google io demo happy case and there’s a lot of missing features still (it’s getting there though). Source: i work on container platform at Cruise