Skip to content
Agent Skills List
#2450 Overall#328 in DevOpsVerified SKILL.md

Gke Workload Security

Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running cluster security audits (`audit_cluster.sh`), configuring Workload Identity Federation (impersonation, KSA/GSA binding, and pod setup), enforcing Network Policies (default-deny and Dataplane V2 logging), isolating high-risk pods inside GKE Sandbox (`gVisor`), enforcing Pod Security Standards (`restricted` labeling), and mounting Secret Manager secrets via CSI (`SecretProviderClass`). Use when auditing cluster security posture, isolating namespaces, applying pod security standards, setting up Workload Identity, or configuring network policies and secret volume mounts. Don't use for cluster-wide control plane security, RBAC hardening, Binary Authorization, Shielded Nodes, or enabling platform-level GKE add-ons (use gke-platform-security instead).

Claude CodeCodexGemini CLISKILL.md Official publisher
0Total downloads
0Active installs
18.6KCommunity stars
—Momentum rank

Overview

What It Does

Gke Workload Security packages a focused devops & cloud workflow for an AI agent. Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running cluster security audits (`audit_cluster.sh`), configuring Workload Identity Federation (impersonation, KSA/GSA binding, and pod setup), enforcing Network Policies (default-deny and Dataplane V2 logging), isolating high-risk pods inside GKE Sandbox (`gVisor`), enforcing Pod Security Standards (`restricted` labeling), and mounting Secret Manager secrets via CSI (`SecretProviderClass`). Use when auditing cluster security posture, isolating namespaces, applying pod security standards, setting up Workload Identity, or configuring network policies and secret volume mounts. Don't use for cluster-wide control plane security, RBAC hardening, Binary Authorization, Shielded Nodes, or enabling platform-level GKE add-ons (use gke-platform-security instead). It is best suited to users who can review the resulting actions and provide only the accounts, files, or command access needed for the task. It is not a substitute for human approval on destructive, financial, security-sensitive, or public-facing actions.

Task ideas

Popular Use Cases

  • Inspect deployment or infrastructure state
  • Automate a repeatable operations task
  • Troubleshoot configuration and runtime issues
  • Apply documented production practices

Installation

Install this Agent Skill

Claude Code

npx skills add https://github.com/google/skills --skill gke-workload-security

Commands derived from the public GitHub SKILL.md record. Checked 2026-09-02. Review the source before running them.

Before you start

Requirements

Claude CodeRequired / review
CodexRequired / review
Public SKILL.md sourceRequired / review
Review instructions and requested permissions before installationRequired / review
Paid serviceCheck source
Supported systemCheck source

Popularity context

Why It’s Popular

Gke Workload Security is a verified Agent Skill from google with a public SKILL.md, compatible with Claude Code, Codex, Gemini CLI.

Alternatives

Similar Skills

Skill Vetter#1 in DevOpsSkillScan#2 in DevOpsProactive Agent#3 in DevOpsElite Longterm Memory#4 in DevOps