用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/CyberStrikeus/CyberStrike --skill cis-gke-v190-5-10-2命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
基于 SOC 职业分类
正在显示 SKILL.md
| name | cis-gke-v190-5.10.2 |
| description | Ensure that Alpha clusters are not used for production workloads (Automated) |
| category | cis-gke |
| version | 1.9.0 |
| author | cyberstrike-official |
| tags | ["cis","gke","kubernetes","gcp","cluster-config","alpha-cluster","production","sla"] |
| cis_id | 5.10.2 |
| cis_benchmark | CIS Google Kubernetes Engine (GKE) Benchmark v1.9.0 |
| tech_stack |
| ["kubernetes","gcp","gke"] |
| cwe_ids | [] |
| chains_with | [] |
| prerequisites | [] |
| severity_boost | {} |
Alpha clusters are not covered by an SLA and are not production-ready.
Alpha clusters are designed for early adopters to experiment with workloads that take advantage of new features before those features are production-ready. They have all Kubernetes API features enabled, but are not covered by the GKE SLA, do not receive security updates, have node auto-upgrade and node auto-repair disabled, and cannot be upgraded. They are also automatically deleted after 30 days.
Users and workloads will not be able to take advantage of features included within Alpha clusters.
The audit script for this recommendation utilizes 3 variables: $CLUSTER_NAME $COMPUTE_ZONE Please set these parameters on the system where you will be executing your gcloud audit script or command.
Using Google Cloud Console:
Using Command Line:
Run the command:
gcloud container clusters describe $CLUSTER_NAME \
--zone $COMPUTE_ZONE \
--format json | jq '.enableKubernetesAlpha'
The output of the above command will return true if it is an Alpha cluster.
Alpha features cannot be disabled. To remediate, a new cluster must be created.
Using Google Cloud Console:
Using Command Line:
Upon creating a new cluster:
gcloud container clusters create [CLUSTER_NAME] \
--zone [COMPUTE_ZONE]
Do not use the --enable-kubernetes-alpha argument.
By default, Kubernetes Alpha features are disabled.
| Controls Version | Control | IG 1 | IG 2 | IG 3 |
|---|---|---|---|---|
| v8 | 16.8 Separate Production and Non-Production Systems | x | x | |
| v7 | 18.9 Separate Production and Non-Production Systems | x | x |