<p>I'm creating my service in Google Cloud platform Kubernetes cluster, it is a simple application that has two endpoints one is public another is secured. For authentication, I use Cloud Identity. Cloud identity is using Firebase under the hood and JWT token has some attributes such as name which in my case is "firebase" and audiences which corresponds to my project id.
For AppEngine app I can use cloud endpoints and it verifies JWT, but what I should use when deploying app to Kubernetes ? I saw that one option is Istio are there more options ? </p>

Zatosasa
<p>You can use <code>Cloud Endpoint</code> with GKE. </p>

<p>Check this official tutorial : <a href="https://cloud.google.com/endpoints/docs/openapi/get-started-kubernetes-engine?hl=en#deploy_backend" rel="nofollow noreferrer">Getting started with Cloud Endpoints on GKE</a>, it may help you.</p>

<p>For your information, you can also consider <a href="https://cloud.google.com/run" rel="nofollow noreferrer">Cloud Run</a> as a fully serverless alternative. It provides a built-in <a href="https://cloud.google.com/run/docs/authenticating/end-users" rel="nofollow noreferrer">authentication layer</a>. </p>
