Menú
Reviews Kubernetes namespace configurations for workload isolation, multi-tenancy, and boundary defense.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Basado en la clasificación ocupacional SOC
Autonomously poll, triage, investigate, and resolve unaddressed open issues on our target GitHub repository strictly within authorized scope.
Configures, optimizes, and troubleshoots GKE ComputeClasses. Use when configuring Spot VMs with on-demand fallback, targeting specific accelerators (GPUs/TPUs) or machine families, restricting ComputeClass access, or debugging pending pods related to node pool auto-creation. Do not use for cluster-level Node Auto Provisioning configuration or general GKE cluster creation.
Audit, monitor, and debug the logging, tracing, metrics, and API/dashboard observability of the Platform Agent.
Standard Operating Procedure (SOP) for generating and updating secure, compliant, and cost-effective GKE manifests.
Systematic Standard Operating Procedure (SOP) for diagnosing GKE workload failures, crash loops, resource OOMs, mounting errors, and connectivity timeouts.
Reviews Kubernetes Pod security contexts for workload-level isolation and privilege escalation risks.
| name | review-security-k8s-namespaces |
| description | Reviews Kubernetes namespace configurations for workload isolation, multi-tenancy, and boundary defense. |
Review Kubernetes namespace configs/resources for structural boundaries, workload isolation, and defense-in-depth security.
default, prod). Expect micro-segmentation.default, kube-system, kube-public, kube-node-lease.kube-admin, k8s-infra).pod-security.kubernetes.io/enforce=privileged).ResourceQuotas/LimitRanges.finalizers on namespaces.Gateway lacking ReferenceGrant, ExternalName to internal namespaces).Secrets, ServiceAccounts, or RoleBindings in namespaces with no active pods.