Audits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running security audits (`audit_cluster.sh`), enforcing Network Policies (default-deny and Dataplane V2 logging), isolating high-risk pods inside GKE Sandbox (`gVisor`), enforcing Pod Security Standards (`restricted` labeling) and pod securityContext, and…
Install
npx skills add google/skills --skill gke-workload-securitynpx skills add google/skills --skill gke-workload-security -a claude-code -gnpx skills add google/skills --skill gke-workload-security -a codex -ggemini skills install https://github.com/google/skills.git --path skills/cloud/gke-workload-securitygh skill install google/skills gke-workload-securitygit clone --depth 1 https://github.com/google/skills /tmp/google__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/google__skills/skills/cloud/gke-workload-security ~/.claude/skills/gke-workload-security # Claude Code
cp -R /tmp/google__skills/skills/cloud/gke-workload-security ~/.agents/skills/gke-workload-security # Codex, Cursor, Gemini CLI, Copilot, OpenCode