Skill: krishnakumarmahadevan-cmd/toolweb-oracle-oke-hardening (version 1.0.0)

--- name: Oracle OKE Security Hardening Tool description: Professional OKE security configuration generator based on CIS Benchmark standards. --- # Overview The Oracle OKE Security Hardening Tool is a professional-grade API designed to generate security-hardened configuration files for Oracle Kubernetes Engine (OKE) deployments. Built on the industry-standard CIS Benchmark framework, this tool automates the creation of secure cluster configurations, reducing manual security configuration effort and human error. This tool is ideal for DevOps engineers, cloud security architects, and Kubernetes administrators who need to rapidly deploy OKE clusters with security best practices pre-configured. It supports customizable hardening options, allowing teams to tailor security postures to their specific compliance requirements and organizational policies. By leveraging CIS Benchmarks, the tool ensures that generated configurations meet or exceed leading security standards for Kubernetes infrastructure, making it invaluable for organizations pursuing SOC 2, ISO 27001, or other security certifications. ## Usage ### Sample Request ```json { "sessionId": "sess_abc123def456", "userId": 12345, "timestamp": "2024-01-15T14:32:00Z", "hardeningOptions": { "rbac": ["enable_default_deny_policy", "enforce_network_policies"], "pod_security": ["restrict_privileged_containers", "enforce_resource_limits"], "audit": ["enable_audit_logging", "log_api_calls"], "secrets": ["enable_encryption_at_rest", "rotate_credentials"] } } ``` ### Sample Response ```json { "status": "success", "configurationId": "cfg_xyz789uvw123", "timestamp": "2024-01-15T14:32:05Z", "hardeningReport": { "clusterName": "oke-hardened-cluster", "appliedPolicies": 8, "complianceScore": 94, "benchmarkReference": "CIS Kubernetes Benchmark v1.7.0" }, "generatedArtifacts": { "kubernetesManifests": "base64_encoded_manifests", "networkPolicies": "base64_encoded_policies", "rbacRoles": "base64_encoded_roles", "auditPolicies": "base64_encoded_audit_config" }, "recommendations": [ "Enable Pod Security Standards enforcement", "Implement network segmentation between namespaces", "Configure regular secret rotation schedules" ] } ``` ## Endpoints ### GET / **Health Check Endpoint** Verifies API availability and readiness. - **Method**: GET - **Path**: `/` - **Description**: Returns health status of the API service - **Parameters**: None - **Response**: JSON object indicating service health status --- ### POST /api/oke/hardening/generate **Generate OKE Hardening Configuration** Generates complete OKE security hardening configuration files based on selected hardening options and CIS Benchmarks. - **Method**: POST - **Path**: `/api/oke/hardening/generate` - **Description**: Creates security-hardened Kubernetes manifests, RBAC rules, network policies, and audit configurations for Oracle OKE **Request Parameters**: | Name | Type | Required | Description | |------|------|----------|-------------| | `hardeningOptions` | Object | Yes | Dictionary mapping hardening categories to arrays of selected hardening measures (e.g., `{"rbac": ["enable_default_deny_policy"], "pod_security": ["restrict_privileged_containers"]}`) | | `sessionId` | String | Yes | Unique session identifier for request tracking and audit logging | | `userId` | Integer \| Null | No | Optional user identifier for multi-tenant environments and access control | | `timestamp` | String | Yes | ISO 8601 formatted timestamp of request generation | **Response Shape**: ```json { "status": "string", "configurationId": "string", "timestamp": "string", "hardeningReport": { "clusterName": "string", "appliedPolicies": "integer", "complianceScore": "integer", "benchmarkReference": "string" }, "generatedArtifacts": { "kubernetesManifests": "string", "networkPolicies": "string", "rbacRoles": "string", "auditPolicies": "string" }, "recommendations": ["string"] } ``` --- ### GET /api/oke/hardening/options **Get Available Hardening Options** Retrieves all available hardening options and categories supported by the tool. - **Method**: GET - **Path**: `/api/oke/hardening/options` - **Description**: Returns comprehensive list of available OKE hardening configurations, organized by category - **Parameters**: None - **Response**: JSON object containing available hardening options grouped by security domain (RBAC, pod security, audit, secrets, networking, etc.) **Response Shape**: ```json { "hardening_categories": { "rbac": ["option1", "option2"], "pod_security": ["option1", "option2"], "audit": ["option1", "option2"], "secrets": ["option1", "option2"], "networking": ["option1", "option2"] }, "benchmarkVersion": "string", "lastUpdated": "string" } ``` ## Pricing | Plan | Calls/Day | Calls/Month | Price | |------|-----------|-------------|-------| | Free | 5 | 50 | Free | | Developer | 20 | 500 | $39/mo | | Professional | 200 | 5,000 | $99/mo | | Enterprise | 100,000 | 1,000,000 | $299/mo | ## About ToolWeb.in - 200+ security APIs, CISSP & CISM, platforms: Pay-per-run, API Gateway, MCP Server, OpenClaw, RapidAPI, YouTube. - [toolweb.in](https://toolweb.in) - [portal.toolweb.in](https://portal.toolweb.in) - [hub.toolweb.in](https://hub.toolweb.in) - [toolweb.in/openclaw/](https://toolweb.in/openclaw/) - [rapidapi.com/user/mkrishna477](https://rapidapi.com/user/mkrishna477) - [youtube.com/@toolweb-009](https://youtube.com/@toolweb-009) ## References - **Kong Route**: https://api.mkkpro.com/hardening/oracle-oke - **API Docs**: https://api.mkkpro.com:8148/docs

path: openapi.json
content: {
  "openapi": "3.1.0",
  "info": {
    "title": "Oracle OKE Security Hardening Tool",
    "description": "Professional OKE Security Configuration Generator based on CIS Benchmark",
    "version": "1.0.0"
  },
  "paths": {
    "/": {
      "get": {
        "summary": "Root",
        "description": "Health check endpoint",
        "operationId": "root__get",
        "responses": {
          "200": {
            "description": "Successful Response",
            "content": {
              "application/json": {
                "schema": {}
              }
            }
          }
        }
      }
    },
    "/api/oke/hardening/generate": {
      "post": {
        "summary": "Generate Oke Hardening Config",
        "description": "Generate OKE security hardening configuration files",
        "operationId": "generate_oke_hardening_config_api_oke_hardening_generate_post",
        "requestBody": {
          "content": {
            "application/json": {
              "schema": {
                "$ref": "#/components/schemas/HardeningRequest"
              }
            }
          },
          "required": true
        },
        "responses": {
          "200": {
            "description": "Successful Response",
            "content": {
              "application/json": {
                "schema": {}
              }
            }
          },
          "422": {
            "description": "Validation Error",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/HTTPValidationError"
                }
              }
            }
          }
        }
      }
    },
    "/api/oke/hardening/options": {
      "get": {
        "summary": "Get Hardening Options",
        "description": "Get all available OKE hardening options",
        "operationId": "get_hardening_options_api_oke_hardening_options_get",
        "responses": {
          "200": {
            "description": "Successful Response",
            "content": {
              "application/json": {
                "schema": {}
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "HTTPValidationError": {
        "properties": {
          "detail": {
            "items": {
              "$ref": "#/components/schemas/ValidationError"
            },
            "type": "array",
            "title": "Detail"
          }
        },
        "type": "object",
        "title": "HTTPValidationError"
      },
      "HardeningRequest": {
        "properties": {
          "hardeningOptions": {
            "additionalProperties": {
              "items": {
                "type": "string"
              },
              "type": "array"
            },
            "type": "object",
            "title": "Hardeningoptions"
          },
          "sessionId": {
            "type": "string",
            "title": "Sessionid"
          },
          "userId": {
            "anyOf": [
              {
                "type": "integer"
              },
              {
                "type": "null"
              }
            ],
            "title": "Userid"
          },
          "timestamp": {
            "type": "string",
            "title": "Timestamp"
          }
        },
        "type": "object",
        "required": [
          "hardeningOptions",
          "sessionId",
          "timestamp"
        ],
        "title": "HardeningRequest"
      },
      "ValidationError": {
        "properties": {
          "loc": {
            "items": {
              "anyOf": [
                {
                  "type": "string"
                },
                {
                  "type": "integer"
                }
              ]
            },
            "type": "array",
            "title": "Location"
          },
          "msg": {
            "type": "string",
            "title": "Message"
          },
          "type": {
            "type": "string",
            "title": "Error Type"
          }
        },
        "type": "object",
        "required": [
          "loc",
          "msg",
          "type"
        ],
        "title": "ValidationError"
      }
    }
  }
}

Security scan verdicts — ClawScan: clean | static analysis: clean | VirusTotal: clean | SkillSpector: clean (LOW)