Skill UI

Sets up production-grade Genkit infrastructure via Terraform, covering Firebase Functions, Cloud Run, GKE, AI monitoring, and CI/CD wiring so deployments run securely at scale.

Automated guidance for GKE cluster configuration within GCP Skills, offering step-by-step instructions, best practices, and production-ready code for compute, storage, BigQuery, Vertex AI, and other GCP services.

Master Google Cloud’s Agent Development Kit and Starter Pack to build containerized multi-agent systems, automate RAG workflows, and deploy production-ready agents via Cloud Run, GKE, Agent Engine, or CI/CD pipelines.

This utility provides comprehensive security auditing for Kubernetes Role-Based Access Control (RBAC) configurations. It identifies overly permissive roles, dangerous wildcard permissions (*), critical ClusterRoleBindings, and potential privilege escalation paths. By integrating tools like rbac-tool, KubiScan, and Kubeaudit, it helps users enforce the principle of least privilege, crucial for compliance and security assessments on EKS, GKE, and AKS clusters.

This guide outlines how to implement Google Cloud Identity-Aware Proxy (IAP) to enforce zero-trust, identity-based access control across various Google Cloud services (App Engine, Cloud Run, GKE, Compute Engine). It details configuring per-request authentication, context-aware policies (like device posture and location), and programmatic access management for highly secure internal applications.

This guide details the implementation of GCP Binary Authorization, a crucial deploy-time security control. It ensures that only trusted, verified container images are deployed on GKE or Cloud Run by requiring cryptographic attestations. Learn how to set up KMS-backed attestors, configure policies, and integrate the validation process into your CI/CD pipeline to enforce robust supply chain integrity.

A specialized tool for performing comprehensive CIS Kubernetes Benchmark audits. It verifies the security configurations of control planes, worker nodes, and etcd against industry best practices. The output is designed to generate actionable compliance evidence for audits like SOC 2 or PCI DSS, helping users identify vulnerabilities, determine non-applicability on managed clusters (EKS, GKE, AKS), and plan remediation strategies.

This skill guides the hardening of managed Kubernetes clusters (EKS, AKS, GKE) by implementing critical cloud security best practices. It covers enforcing Pod Security Standards, deploying Network Policies for least privilege communication, and configuring Workload Identity to eliminate static cloud credentials. Ideal for production deployments or remediation after a security audit.

This comprehensive workflow guides the design, optimization, and deployment of scalable, cost-effective Google Cloud Platform (GCP) architectures for both startups and large enterprises. It covers the full lifecycle, from gathering detailed requirements (compliance, SLA) and recommending optimal patterns (Serverless, GKE, Data Pipelines) to estimating costs, generating Infrastructure as Code (IaC) using Terraform, setting up CI/CD pipelines, and completing a thorough security review.

Automate the deployment of CAST AI across various multi-cloud Kubernetes clusters, including EKS, GKE, and AKS. This module uses Terraform Infrastructure as Code (IaC) patterns to reliably configure necessary components like IAM roles, node autoscaling policies, and cluster resources, ensuring standardized onboarding across different cloud environments.

A comprehensive guide to connecting any Kubernetes cluster (EKS, GKE, AKS) to CAST AI for cost optimization, autoscaling, and security monitoring. This skill covers the entire setup process, including generating API keys, installing the CAST AI agent via Helm charts, and integrating the provider using Terraform.

This tool audits Kubernetes Role-Based Access Control (RBAC) configurations to systematically identify overly permissive roles, dangerous wildcards, and insecure ClusterRoleBindings. It helps pinpoint potential privilege escalation paths, service account abuses, and compliance gaps in EKS, GKE, and AKS clusters, ensuring adherence to the principle of least privilege.