메뉴
Reviews Kubernetes network configurations (NetworkPolicies, Services, Ingress) for isolation and exposure risks.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Autonomously poll, triage, investigate, and resolve unaddressed open issues on our target GitHub repository strictly within authorized scope.
Configures, optimizes, and troubleshoots GKE ComputeClasses. Use when configuring Spot VMs with on-demand fallback, targeting specific accelerators (GPUs/TPUs) or machine families, restricting ComputeClass access, or debugging pending pods related to node pool auto-creation. Do not use for cluster-level Node Auto Provisioning configuration or general GKE cluster creation.
Audit, monitor, and debug the logging, tracing, metrics, and API/dashboard observability of the Platform Agent.
Standard Operating Procedure (SOP) for generating and updating secure, compliant, and cost-effective GKE manifests.
Systematic Standard Operating Procedure (SOP) for diagnosing GKE workload failures, crash loops, resource OOMs, mounting errors, and connectivity timeouts.
Reviews Kubernetes Pod security contexts for workload-level isolation and privilege escalation risks.
| name | review-security-k8s-network |
| description | Reviews Kubernetes network configurations (NetworkPolicies, Services, Ingress) for isolation and exposure risks. |
Review Kubernetes network configurations (NetworkPolicies, Services, Ingresses, Service Mesh) for vulnerabilities.
NetworkPolicy for both Ingress and Egress.0.0.0.0/0, ::/0) or empty podSelector/namespaceSelector.LoadBalancer services lacking internal annotations if meant to be internal.NodePort usage (bypasses standard protections).tls block on Ingresses. Flag missing HTTP->HTTPS redirects.Endpoints/EndpointSlice resources (risk of malicious external redirect).hostNetwork: true (bypasses pod network policies).STRICT mutual TLS via PeerAuthentication.AuthorizationPolicies follow default-deny and don't conflict with legacy policies.