Configure GKE cluster security with Workload Identity, RBAC, and IAM roles.
npx skills add https://github.com/google/skills --skill gke-security-google
Please help me install this Agent Skill. Skill: gke-security Source: https://github.com/google/skills/tree/main/skills/cloud/gke-security Command: npx skills add https://github.com/google/skills --skill gke-security-google
This Skill addresses the security concerns of Google Kubernetes Engine (GKE) clusters, providing comprehensive guidance for configuring and hardening GKE security settings.
Use the gke-security skill to apply the golden path security defaults to your GKE cluster.
High-intent search queries and answers about installing and using this skill.
Configure Workload Identity Federation for GKE clusters by linking Kubernetes service accounts to IAM roles. This approach secures workloads by eliminating the need to manage long-lived service account keys, reducing credential exposure.
Harden RBAC permissions in Google Kubernetes Engine by applying least privilege principles to role definitions. This limits cluster resource access, ensuring service accounts and users only receive the exact permissions required for their tasks.
Integrate Secret Manager with GKE workloads to securely inject secrets at runtime. This prevents storing sensitive data in Kubernetes ConfigMaps or base64-encoded Secrets, leveraging IAM for strict access control over secret values.
Enforce Binary Authorization and Pod Security Standards on existing GKE clusters to verify container images and restrict pod capabilities. These configurations ensure only trusted images deploy and workloads run with limited privileges.
Setting up Network Policies in GKE requires specific IAM roles to manage cluster networking resources. Configuring these policies isolates workloads by controlling ingress and egress traffic flow between namespaces and pods.
Applying these GKE security best practices requires prior knowledge of GKE and cloud security concepts. IT administrators use this guidance to implement golden path security defaults, configuring IAM, RBAC, and Workload Identity effectively.
HabitaNexusAutomate Google Cloud Platform backend setup and orchestration for Flutter apps.
pluginagentmarketplaceDesign and enforce Kubernetes RBAC, Pod Security Standards, network policies, and secret management.
JNZader-VaultProvide Dockerfiles, Kubernetes manifests, GitHub Actions workflows, and Terraform for GKE.
Hamza123545Provision OKE, AKS, and GKE Kubernetes clusters with Terraform.
