523건 · 관련도순
bu skill covers implementing Open Policy Agent (OPA) and Gatekeeper for policy-as-code enforcement in Kubernetes and CI/CD pipelines. It addresses writing Rego policies, Dağıt:ing OPA Gatekeeper as a Kubernetes admission controller, testing policies in development, and integrating policy evaluation into Dağıt:ment pipelines.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Harden Kubernetes Role-Based Access Control by implementing least-privilege policies, auditing role bindings, eliminating cluster-admin sprawl, and integrating external identity providers.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Kubernetes penetration testing systematically evaluates cluster security by simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC, network policies, and secrets. Using tools
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Kubernetes NetworkPolicies provide pod-level network segmentation by defining ingress and egress rules that control traffic flow between pods, namespaces, and external endpoints. Combined with CNI plu
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Pod Security Standards (PSS) define three levels of security policies -- Privileged, Baseline, and Restricted -- enforced by the Pod Security Admission (PSA) controller built into Kubernetes 1.25+. PS
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
tespit etmeand prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Implement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod communication.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
bu skill covers hardening managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards, network policies, workload identity, RBAC scoping, image admission controls, and runtime security monitoring. It addresses cloud-specific security features including IRSA for EKS, Workload Identity for GKE, and Managed Identities for AKS.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account abuse, and privilege escalation paths using kubectl, rbac-tool, KubiScan, and Kubeaudit.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Detect and prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account abuse, and privilege escalation paths using kubectl, rbac-tool, KubiScan, and Kubeaudit.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Diagnóstico e operação de Kubernetes — pods, deployments, ingress, HPA, PVC, StorageClass, NetworkPolicy, Secrets, Helm, ArgoCD, cert-manager. Use quando o usuário disser "kubernetes", "k8s", "pod", "deployment", "ingress", "CrashLoopBackOff", "não sobe", "escalar", "helm", "argocd". Leitura livre; apply, scale, delete passam pelo portão.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Expert DevOps engineer for CI/CD, IaC, Kubernetes, and deployment automation. Activate on: CI/CD, GitHub Actions, Terraform, Docker, Kubernetes, Helm, ArgoCD, GitOps, deployment pipeline, infrastructure as code, container orchestration. NOT for: application code (use language skills), database schema (use data-pipeline-engineer), API design (use api-architect).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Detect and prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account abuse, and privilege escalation paths using kubectl, rbac-tool, KubiScan, and Kubeaudit.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Kubernetes cluster attack techniques covering the full attack lifecycle from initial foothold in a pod to cluster-wide compromise. Covers service account token theft and impersonation, RBAC misconfiguration exploitation including wildcard permissions and privilege escalation via role binding, direct etcd access for secret extraction, kubelet API abuse on port 10250 and read-only port 10255, pod escape via hostPID hostNetwork and hostPath volume mounts, Kubernetes secrets enumeration and decoding, admission controller bypass techniques, network policy bypass and lateral movement, cloud metadata service access from pods for credential theft on AWS EKS GCP GKE and Azure AKS, CRD and operator abuse for persistence, and node compromise via DaemonSet deployment. Tools include kubectl, kube-hunter, peirates, kubeaudit, kdigger, kubeletctl. Maps to MITRE ATT&CK T1609 Container Administration Command, T1610 Deploy Container, T1613 Container and Resource Discovery. Use this skill when assessing Kubernetes clusters,...
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Analyze running containers in a CTF sandbox by comparing declared configuration with live processes, mounts, and routes. Trace how secrets and helper containers affect behavior, then document the earliest mismatch and a minimal evidence chain.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Create and tune Falco rules to detect possible container escapes, where a container gains access to its host. Define detection conditions, alert priorities, and output fields, then refine exceptions to reduce false positives.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Prepare trained machine learning models for production with deployment, monitoring, and retraining workflows. Build RAG systems that retrieve documents for answers, and integrate language model APIs with retries, fallback providers, and cost tracking.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Deploy AI models on GKE with suitable GPUs or TPUs and model servers. Generate deployment configuration, adjust automatic scaling, and tune inference—the process of producing model responses—for memory use, throughput, and response time.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Run batch processing, scientific simulations, and machine learning training on Google Kubernetes Engine. Configure parallel jobs, queues that manage resource access, and distributed computation, with guidance on scaling idle capacity down and recovering from interruptions.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Plan and configure a shared GKE cluster for multiple teams or environments. Set up namespaces, team permissions, resource limits, and network separation, then use labels and GKE cost allocation to track spending by team.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Configure Backup for GKE to protect Kubernetes configurations and persistent data. Set backup schedules, retention periods, and customer-managed encryption keys, then prepare restore plans with explicit policies for handling existing resources.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.
Create and validate Terraform alerts for GKE using PromQL, a monitoring query language. Cover response times, errors, traffic, memory usage, and cluster health, with checks for alert timing, duplicate signals, and metric ingestion costs.
한국어 요약은 준비 중입니다. 영어 요약을 표시하고 있습니다.