GKE Workload Security skill: what it does and how to install it

What it does. Provides workflows and example commands and manifests for auditing a GKE cluster, applying default-deny network policies, isolating pods with gVisor, enforcing restricted Pod Security Standards and mounting Secret Manager secrets through the CSI driver. It also covers network policy logging on Dataplane V2.

When to use it. For workload- and namespace-level security configuration in GKE. It does not cover Workload Identity setup or cluster-wide security controls such as RBAC and Shielded Nodes.