About
This skill provides specialized guidance for securing Google Kubernetes Engine (GKE) through robust Identity and Access Management (IAM) patterns. It automates the implementation of least-privilege service accounts for nodes and workloads to minimize blast radius, sets up Workload Identity Federation for credential-less authentication with external providers like GitHub Actions, and establishes detailed audit logging for full visibility into cluster management and API activity. By leveraging Terraform-based patterns, it ensures that your infrastructure security posture remains consistent and compliant with enterprise standards.
