cis-gke-v170-5.10.5
Enable Security Posture (Manual)
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Enable Security Posture (Manual)
Ensure GKE clusters are not running using the Compute Engine default service account (Automated)
Prefer using dedicated GCP Service Accounts and Workload Identity (Manual)
Ensure Kubernetes Secrets are encrypted using keys managed in Cloud KMS (Automated)
Ensure the GKE Metadata Server is Enabled (Automated)
Ensure Container-Optimized OS (cos_containerd) is used for GKE node images (Automated)
Ensure Node Auto-Repair is enabled for GKE nodes (Automated)
Ensure Node Auto-Upgrade is enabled for GKE nodes (Automated)
When creating New Clusters - Automate GKE version management using Release Channels (Automated)
Ensure Integrity Monitoring for Shielded GKE Nodes is Enabled (Automated)