Does this skill require specific tools?

Yes, it is designed for use with GCP projects, Terraform 1.0+, and kubectl for cluster management.

What is the primary security model used?

The skill implements a zero-trust network model, where all ingress traffic is blocked by default and only essential communication is explicitly permitted.

How does this skill help with GKE security?

It provides automated implementation patterns for zero-trust networking, VPC-native IP ranges, and Cloud Armor protection to harden your cluster.

Can this skill help with DDoS protection?

Yes, it includes configurations for Google Cloud Armor to provide Layer 7 DDoS mitigation and Web Application Firewall (WAF) capabilities.

What is the benefit of VPC-native networking in this skill?

VPC-native networking provides container-native IP allocation, improving performance and simplifying integration with other GCP services.

GKE Network Security

Name: GKE Network Security
Author: adaptive-enforcement-lab

byadaptive-enforcement-lab

0•

クラウドインフラストラクチャ

Secures GKE infrastructure using zero-trust network policies, VPC-native IP allocation, and Cloud Armor DDoS protection.

The GKE Network Security skill provides automated guidance and implementation patterns for hardening Google Kubernetes Engine environments. It focuses on establishing a zero-trust architecture through default-deny ingress policies, optimizing network performance with VPC-native IP allocation, and securing external traffic via Cloud Armor Web Application Firewalls. By leveraging Private Service Connect, it ensures that traffic to GCP services stays within the Google backbone, minimizing exposure to the public internet while simplifying security policy management and reducing the attack surface of your cloud-native workloads.

主な機能

01Implements zero-trust default-deny network policies

020 GitHub stars

03Automates secure GKE cluster network configuration using Terraform

04Configures VPC-native networking with Alias IP ranges

05Deploys Cloud Armor for Layer 7 DDoS and WAF protection

06Enables Private Service Connect for secure GCP service access

ユースケース

01Hardening production GKE clusters against unauthorized lateral movement

02Setting up edge security and DDoS mitigation for public-facing Kubernetes applications

03Implementing private-only connectivity for sensitive cloud workloads

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add adaptive-enforcement-lab/claude-skills network-security

For use in Claude.ai and ChatGPT

Download Skill