cis-gke-autopilot-v120-5.4.1
Enable VPC Flow Logs and Intranode Visibility (Automated)
1.21k repo starsObserved in 1 repos
DevOps & Security
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Enable VPC Flow Logs and Intranode Visibility (Automated)
Ensure Control Plane Authorized Networks is Enabled (Automated)
Ensure clusters are created with Private Endpoint Enabled and Public Access Disabled (Automated)
Ensure clusters are created with Private Nodes (Automated)
Ensure use of Google-managed SSL Certificates (Automated)
Enable Customer-Managed Encryption Keys (CMEK) for GKE Persistent Disks (PD) (Manual)
Enable Security Posture (Manual)
Ensure that the cluster-admin role is only used where required (Manual)
Avoid non-default bindings to system:authenticated (Automated)
Minimize access to secrets (Manual)