Google Cloud previewed the Wiz Runtime Sensor managed add-on for Google Kubernetes Engine, supporting both Standard and Autopilot clusters.

Google introduced the Wiz Runtime Sensor as a first-party managed platform add-on in preview for Google Kubernetes Engine (GKE). It supports Standard and Autopilot clusters and integrates Wiz’s extended Berkeley Packet Filter (eBPF) runtime threat detection.

GKE manages sensor deployment, credential injection, and lifecycle updates. Google presents the integration as addressing installation and update overhead, credential distribution, fleet-wide enforcement gaps, and runtime agents’ CPU and memory demands.

The add-on uses GKE’s Secret Manager secret-sync integration to keep Wiz credentials in a centralized vault outside the cluster, accessible only to a dedicated service account. GKE retrieves the credentials and injects them into sensor pods; updating a key in Secret Manager synchronizes it to the sensor without cluster restarts or manual intervention.

After credentials are stored in Secret Manager, operators can enable the add-on through the gcloud command-line interface or the GKE application programming interface. The announcement describes runtime protection against active threats, distinct from scanning stored artifacts for vulnerabilities; it does not provide measured detection rates or resource-overhead benchmarks.