gke-workload-security — Agent Skill 安装配置（SkillsMP） · AgentHub

gke-workload-security — Agent Skill 安装配置（SkillsMP）

Name: gke-workload-security
Author: google

SkillSkillsMP

io.github.google/skills/gke-workload-security · vmain

Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running cluster security audits (`audit_cluster.sh`), configuring Workload Identity Federation (impersonation, KSA/GSA binding, and pod setup), enforcing Network Policies (default-deny and Dataplane V2 logging), isolating high-risk pods inside GKE Sandbox (`gVisor`), enforcing Pod Security Standards (`restricted` labeling), and mounting Secret Manager secrets via CSI (`SecretProviderClass`). Use when auditing cluster security posture, isolating namespaces, applying pod security standards, setting up Workload Identity, or configuring network policies and secret volume mounts. Don't use for cluster-wide control plane security, RBAC hardening, Binary Authorization, Shielded Nodes, or enabling platform-level GKE add-ons (use gke-platform-security instead).

在 SkillsMP 查看 ↗源仓库 ↗

热度数据

仓库星标19.2k

概览

gke-workload-security 是一个Agent Skill，收录自 SkillsMP。本页提供 Cursor、Claude Code 等客户端的安装配置片段。

适用场景

代码审查与 GitHub Cursor 开发必备

Agent Skill 是带 SKILL.md 的指令包。安装后，AI 会根据 description 在匹配任务时自动加载，无需每次手动粘贴提示词。

安装

选择你的平台查看安装方式

选择安装方式

# 改 -a 切换客户端：cursor | claude-code | codex | github-copilot
npx skills add google/skills@gke-workload-security -a cursor -y

统一 Manifest

{
  "id": "io.github.google/skills/gke-workload-security",
  "type": "skill",
  "version": "main",
  "displayName": "gke-workload-security",
  "description": "Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running cluster security audits (`audit_cluster.sh`), configuring Workload Identity Federation (impersonation, KSA/GSA binding, and pod setup), enforcing Network Policies (default-deny and Dataplane V2 logging), isolating high-risk pods inside GKE Sandbox (`gVisor`), enforcing Pod Security Standards (`restricted` labeling), and mounting Secret Manager secrets via CSI (`SecretProviderClass`). Use when auditing cluster security posture, isolating namespaces, applying pod security standards, setting up Workload Identity, or configuring network policies and secret volume mounts. Don't use for cluster-wide control plane security, RBAC hardening, Binary Authorization, Shielded Nodes, or enabling platform-level GKE add-ons (use gke-platform-security instead).",
  "author": {
    "name": "google",
    "url": "https://github.com/google"
  },
  "repository": {
    "url": "https://github.com/google/skills",
    "source": "github",
    "subfolder": "skills/cloud/gke-workload-security"
  },
  "homepage": "https://skillsmp.com/creators/google/skills/skills-cloud-gke-workload-security",
  "distribution": {
    "packages": [
      {
        "registryType": "source",
        "identifier": "google/skills@gke-workload-security",
        "version": "main",
        "runtimeHint": "npx skills add"
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "codex",
    "vscode"
  ],
  "keywords": [
    "repo_stars:19246"
  ],
  "provenance": {
    "origin": "skillsmp",
    "originalId": "google-skills-skills-cloud-gke-workload-security-skill-md",
    "originalUrl": "https://skillsmp.com/creators/google/skills/skills-cloud-gke-workload-security",
    "isOfficial": false,
    "status": "active"
  }
}

gke-workload-security — Agent Skill 安装配置（SkillsMP）

概览

适用场景

安装

使用方式

相关资源

building-html-canvases

policy-and-managed-settings

triage-codacy

triage-codeql

packaging-static-installer

docs-learn-site-structure

统一 Manifest