gke-multitenancy SKILL.md skillA

gke-multitenancy from gke-labs/kube-agents is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add gke-labs/kube-agents/gke-multitenancy@git:20261010.fbd1f7d

Pins git:20261010.fbd1f7d in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
gke-labs/kube-agents
Path
third_party/google-skills/gke-multitenancy/SKILL.md
Versions recorded
1
Latest version
git:20261010.fbd1f7d, committed Oct 10, 2026
Size
5,360 bytes
Repository stars
124
License
Apache-2.0

Plans and configures multi-tenancy on GKE. Covers namespace isolation, RBAC planning for teams, resource quotas, LimitRanges, network isolation, and cost allocation. Use when designing GKE multi-tenancy, configuring GKE namespaces, setting up resource quotas, or isolating GKE teams. Don't use for single-tenant cluster configuration or general deployment instructions (use gke-basics or gke-app-onboarding instead).

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# GKE Multi-Tenancy

This reference covers enterprise multi-tenancy patterns on GKE, including
namespace isolation, RBAC planning, resource quotas, and network segmentation.

> **MCP Tools:** `apply_k8s_manifest`, `get_k8s_resource`, `check_k8s_auth`,
> `describe_k8s_resource`, `delete_k8s_resource`

## When to Use

-   Multiple teams sharing a single GKE cluster
-   Isolating workloads by environment (dev/staging/prod) within one cluster
-   Implementing least-privilege access control
-   Cost allocation across teams or projects

## Multi-Tenancy Models

| Model                         | Isolation    | Complexity | Cost           |
| ----------------------------- | ------------ | ---------- | -------------- |
| **Namespace-per-team**        | Soft (RBAC + | Low        | Lowest (shared |
:                               : Network      :            : cluster)       :
:                               : Policy)      :            :                :
| **Namespace-per-environment** | Soft         | Low        | Low            |
| **Node pool-per-team**        | Medium       | Medium     | Medium         |
:                               : (dedicated   :            :                :
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add gke-labs/kube-agents/gke-multitenancy@sha256:7f868beb75f778f2

The line at the top of this page pins the label git:20261010.fbd1f7d, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_nvafwioemgjz72pt.svg)](https://markdownregistry.com/a/art_nvafwioemgjz72pt)

3 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 1 version of this file, committed on Oct 10, 2026.

versioncommittedcommitsizeaudit
git:20261010.fbd1f7d latest2026-10-10 fbd1f7d 5,360 BA view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (5360 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

gke-labs/kube-agents · 124 stars · license Apache-2.0 · pushed 2026-11-06 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_nvafwioemgjz72pt
GET https://markdownregistry.com/api/v1/resolve?ref=gke-labs/kube-agents/gke-multitenancy
GET https://markdownregistry.com/api/v1/blob/7f868beb75f778f204707b5f45bcf0eaae54aabcd267657f2a2f7aa9ca6b729c

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from gke-labs/kube-agents

edit-mirrored-skill SKILL.md skill
gke-labs/kube-agents · .agents/skills/edit-mirrored-skill/SKILL.md · Edit, sync or start mirroring a `gke-*` skill in `agents/platform/skills/` that is copied from google/skills. Use when…
git:20261016.ac3a849 · audit A · 124 stars
eval-fix-loop SKILL.md skill
gke-labs/kube-agents · .agents/skills/eval-fix-loop/SKILL.md · Take one failing eval case (or one root cause behind several), diagnose it from its recorded runs, classify the miss…
git:20261105.5fd8319 · audit A · 124 stars
install-kube-agents SKILL.md skill
gke-labs/kube-agents · .agents/skills/install-kube-agents/SKILL.md · Install, set up, or deploy kube-agents (the Kubernetes Agentic Harness) and its Platform Agent onto a GKE cluster in a…
git:20261105.ce5f74d · audit C · 124 stars
review-address-feedback SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-address-feedback/SKILL.md · Address review feedback on an open pull request: triage and fix findings, reply in every thread, resolve the addressed…
git:20261023.631dcf4 · audit A · 124 stars
review-adversarial SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-adversarial/SKILL.md · Reviews a change adversarially — establishes what it claims to do, hunts candidates from eleven angles, then re-derives…
git:20261023.b413863 · audit A · 124 stars
review-chat-ux SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-chat-ux/SKILL.md · Reviews a diff that changes what users read in Slack or Google Chat against the chat UX rules, and reports each…
git:20261105.db3b31b · audit A · 124 stars
review-docs-drift SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-docs-drift/SKILL.md · Reviews a pull request for documentation drift — finds which docs the change should have updated, verifies doc claims…
git:20261030.59401a3 · audit A · 124 stars
review-preflight SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-preflight/SKILL.md · Runs the pre-PR review passes — adversarial and docs-drift, required on every change, plus chat UX when chat output…
git:20261105.db3b31b · audit A · 124 stars
review-security-k8s-admission SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-admission/SKILL.md · Reviews Kubernetes Admission Control (Webhooks, VAP/MAP) for vulnerabilities.
git:20260522.4bbd4a0 · audit A · 124 stars
review-security-k8s-agents-audit-logs SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-audit-logs/SKILL.md · Reviews Kubernetes and application audit logging for AI agents, ensuring tamper-proof observability.
git:20260521.2bcbdef · audit A · 124 stars
review-security-k8s-agents-credentials SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-credentials/SKILL.md · Reviews AI agent Kubernetes configurations for credentials exposed to agents.
git:20260521.2bcbdef · audit A · 124 stars
review-security-k8s-agents-data-exfil SKILL.md skill
gke-labs/kube-agents · .agents/skills/review-security-k8s-agents-data-exfil/SKILL.md · Reviews Kubernetes configurations to prevent data exfiltration by AI agents.
git:20260521.2bcbdef · audit A · 124 stars

Every file in gke-labs/kube-agents

Other files named gke-multitenancy

gke-multitenancy SKILL.md skill
gke-labs/kube-agents · agents/platform/skills/gke-multitenancy/SKILL.md · Plans and configures multi-tenancy on GKE. Covers namespace isolation, RBAC planning for teams, resource quotas…
git:20261019.982e177 · audit A · 124 stars

Browse by kind, by grade A, or by owner.