概要
This skill provides comprehensive guidance and automation for securing GKE clusters through infrastructure-as-code. It streamlines the implementation of critical security features like private clusters, Workload Identity Federation, and network policies while enforcing strict IAM configurations and runtime enforcement. By following established defense-in-depth patterns, it helps developers significantly reduce the attack surface of their containerized workloads and maintain a repeatable, auditable security posture across all deployment environments from development to production.
