`/gke-platform-security`

安全與環境設定google/skillsAI翻譯

規劃、設定並強化 GKE 叢集的平台層級安全，涵蓋叢集附加元件、RBAC 強化、Binary Authorization、Secrets 加密與 Security Posture。

安裝次數: 5400
專案星數: 2.2 萬 ★
授權: Apache-2.0
專案更新: 2026-11-02

怎麼裝

npx skills add https://github.com/google/skills --skill gke-platform-security

安裝前請先看過原文內容。中文說明是 AI 翻譯，不保證安全。

原文

Plans, configures, and hardens platform-level Google Kubernetes Engine (GKE) cluster security. Covers cluster add-ons (Secret Manager enablement), RBAC hardening (disabling insecure bindings, audit tools), Binary Authorization, Secrets Encryption (--database-encryption-key), Security Posture (--security-posture), enabling Shielded Nodes, GKE Sandbox cluster enablement, GKE IAM roles, and cross-service authentication IAM patterns. Use when securing cluster control planes, hardening GKE RBAC, enabling Shielded Nodes, enabling GKE Sandbox runtime, enabling cluster-wide security add-ons, or managing GKE IAM roles. Don't use for Workload Identity (use gke-workload-identity) or workload-level security (SecretProviderClass, PSS, NetPol, gVisor pod runtimeClassName; use gke-workload-security).

到 GitHub 看原文