Skill: krishnakumarmahadevan-cmd/toolweb-gke-hardening (version 1.0.0)

--- name: GKE Security Hardening Tool description: Generates CIS Benchmark-aligned security hardening configurations for Google Kubernetes Engine clusters. --- # Overview The GKE Security Hardening Tool is a specialized security configuration generator designed to help DevOps engineers and security teams harden Google Kubernetes Engine (GKE) clusters according to Center for Internet Security (CIS) Benchmark standards. The tool automates the creation of security-focused configuration files, reducing manual setup time and ensuring compliance with industry-recognized security standards. This tool is ideal for organizations deploying GKE in regulated environments, security-conscious teams implementing defense-in-depth strategies, and DevOps teams seeking to automate cluster hardening workflows. By leveraging the CIS Benchmarks, the tool ensures that generated configurations align with proven security practices and reduce the attack surface of Kubernetes deployments. Key capabilities include generating hardened configuration files based on selected security options, retrieving all available hardening parameters, and tracking requests through session and user identifiers for audit and compliance purposes. # Usage ## Example Request Generate a hardened GKE configuration with specific security options: ```json { "hardeningOptions": { "networkPolicy": ["enabled", "restrictive"], "rbac": ["enabled"], "podSecurityPolicy": ["enabled", "restricted"], "auditLogging": ["enabled", "verbose"], "encryptionAtRest": ["enabled"] }, "sessionId": "sess_abc123def456", "userId": 12345, "timestamp": "2024-01-15T10:30:00Z" } ``` ## Example Response ```json { "configFiles": [ { "filename": "network-policy.yaml", "content": "apiVersion: networking.k8s.io/v1\nkind: NetworkPolicy\nmetadata:\n name: default-deny\nspec:\n podSelector: {}\n policyTypes:\n - Ingress\n - Egress" }, { "filename": "rbac-config.yaml", "content": "apiVersion: rbac.authorization.k8s.io/v1\nkind: ClusterRole\nmetadata:\n name: minimal-access\nrules:\n- apiGroups: [\"\"]\n resources: [\"pods\"]\n verbs: [\"get\", \"list\"]" }, { "filename": "pod-security-policy.yaml", "content": "apiVersion: policy/v1beta1\nkind: PodSecurityPolicy\nmetadata:\n name: restricted\nspec:\n privileged: false\n allowPrivilegeEscalation: false\n requiredDropCapabilities:\n - ALL" } ], "sessionId": "sess_abc123def456", "generatedAt": "2024-01-15T10:30:05Z", "status": "success" } ``` # Endpoints ## GET / **Description:** Health check endpoint for service availability verification. **Parameters:** None **Response:** Returns JSON object confirming service status. --- ## POST /api/gke/hardening/generate **Description:** Generates GKE security hardening configuration files based on provided hardening options. **Parameters:** | Name | Type | Required | Description | |------|------|----------|-------------| | hardeningOptions | object | Yes | Dictionary mapping hardening feature names to arrays of configuration values (e.g., `{"networkPolicy": ["enabled", "restrictive"]}`) | | sessionId | string | Yes | Unique session identifier for tracking and audit purposes | | userId | integer or null | No | User identifier for audit logging and usage attribution | | timestamp | string | Yes | ISO 8601 formatted timestamp of the request | **Response:** Returns JSON object containing: - `configFiles`: Array of objects with `filename` and `content` properties containing generated YAML configurations - `sessionId`: Echo of the request session identifier - `generatedAt`: Timestamp of configuration generation - `status`: "success" or error status --- ## GET /api/gke/hardening/options **Description:** Retrieves all available hardening options and their supported values for GKE configuration. **Parameters:** None **Response:** Returns JSON object mapping hardening feature names to arrays of available configuration options. --- ## GET /health **Description:** Health check endpoint for monitoring and liveness probes. **Parameters:** None **Response:** Returns JSON object confirming service health status. # Pricing | Plan | Calls/Day | Calls/Month | Price | |------|-----------|-------------|-------| | Free | 5 | 50 | Free | | Developer | 20 | 500 | $39/mo | | Professional | 200 | 5,000 | $99/mo | | Enterprise | 100,000 | 1,000,000 | $299/mo | # About ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube. - [toolweb.in](https://toolweb.in) - [portal.toolweb.in](https://portal.toolweb.in) - [hub.toolweb.in](https://hub.toolweb.in) - [toolweb.in/openclaw/](https://toolweb.in/openclaw/) - [rapidapi.com/user/mkrishna477](https://rapidapi.com/user/mkrishna477) - [youtube.com/@toolweb-009](https://youtube.com/@toolweb-009) # References - Kong Route: https://api.mkkpro.com/hardening/gke - API Docs: https://api.mkkpro.com:8147/docs

path: openapi.json
content: {
  "openapi": "3.1.0",
  "info": {
    "title": "GKE Security Hardening Tool",
    "description": "CIS Benchmark-Based Google Kubernetes Engine Security Configuration Generator",
    "version": "1.0.0"
  },
  "paths": {
    "/": {
      "get": {
        "summary": "Root",
        "description": "Health check endpoint",
        "operationId": "root__get",
        "responses": {
          "200": {
            "description": "Successful Response",
            "content": {
              "application/json": {
                "schema": {}
              }
            }
          }
        }
      }
    },
    "/api/gke/hardening/generate": {
      "post": {
        "summary": "Generate Gke Hardening Config",
        "description": "Generate GKE security hardening configuration files",
        "operationId": "generate_gke_hardening_config_api_gke_hardening_generate_post",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/HardeningRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "Successful Response",
            "content": {
              "application/json": {
                "schema": {}
              }
            }
          },
          "422": {
            "description": "Validation Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/HTTPValidationError"
                }
              }
            }
          }
        }
      }
    },
    "/api/gke/hardening/options": {
      "get": {
        "summary": "Get Hardening Options",
        "description": "Get all available GKE hardening options",
        "operationId": "get_hardening_options_api_gke_hardening_options_get",
        "responses": {
          "200": {
            "description": "Successful Response",
            "content": {
              "application/json": {
                "schema": {}
              }
            }
          }
        }
      }
    },
    "/health": {
      "get": {
        "summary": "Health Check",
        "description": "Health check endpoint",
        "operationId": "health_check_health_get",
        "responses": {
          "200": {
            "description": "Successful Response",
            "content": {
              "application/json": {
                "schema": {}
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "HTTPValidationError": {
        "properties": {
          "detail": {
            "items": {
              "$ref": "#/components/schemas/ValidationError"
            },
            "type": "array",
            "title": "Detail"
          }
        },
        "type": "object",
        "title": "HTTPValidationError"
      },
      "HardeningRequest": {
        "properties": {
          "hardeningOptions": {
            "additionalProperties": {
              "items": {
                "type": "string"
              },
              "type": "array"
            },
            "type": "object",
            "title": "Hardeningoptions"
          },
          "sessionId": {
            "type": "string",
            "title": "Sessionid"
          },
          "userId": {
            "anyOf": [
              {
                "type": "integer"
              },
              {
                "type": "null"
              }
            ],
            "title": "Userid"
          },
          "timestamp": {
            "type": "string",
            "title": "Timestamp"
          }
        },
        "type": "object",
        "required": [
          "hardeningOptions",
          "sessionId",
          "timestamp"
        ],
        "title": "HardeningRequest"
      },
      "ValidationError": {
        "properties": {
          "loc": {
            "items": {
              "anyOf": [
                {
                  "type": "string"
                },
                {
                  "type": "integer"
                }
              ]
            },
            "type": "array",
            "title": "Location"
          },
          "msg": {
            "type": "string",
            "title": "Message"
          },
          "type": {
            "type": "string",
            "title": "Error Type"
          }
        },
        "type": "object",
        "required": [
          "loc",
          "msg",
          "type"
        ],
        "title": "ValidationError"
      }
    }
  }
}

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)