Does this skill support the latest Pod Security Standards?

Yes, it includes implementation guides for Privileged, Baseline, and Restricted standards to replace deprecated PodSecurityPolicies.

Is OPA Gatekeeper supported for admission control?

Yes, the skill includes ConstraintTemplates and Constraints for validating labels and enforcing custom security requirements.

Can I use this for multi-tenant isolation?

Absolutely. It provides templates for default-deny network policies and namespace-scoped RBAC to ensure secure workload isolation.

How does it handle Service Mesh security?

It provides configurations for Istio, including PeerAuthentication for STRICT mTLS and fine-grained AuthorizationPolicies for service-to-service communication.

Kubernetes Security Policies

Name: Kubernetes Security Policies
Author: Microck

byMicrock

•

セキュリティとテスト

Implements production-grade Kubernetes security through NetworkPolicies, Pod Security Standards, and RBAC configurations.

This skill provides a comprehensive framework for securing Kubernetes clusters by enforcing defense-in-depth strategies. It enables developers to automate the creation of network isolation rules, implement the latest Pod Security Standards (Privileged, Baseline, Restricted), and configure fine-grained RBAC for least-privilege access. Whether you are securing a multi-tenant cluster, preparing for a CIS benchmark audit, or implementing a service mesh with Istio, this skill guides the generation of secure-by-default manifests and admission control policies using OPA Gatekeeper.

主な機能

01Automated NetworkPolicy generation for ingress and egress isolation

0281 GitHub stars

03Least-privilege RBAC configuration for users and service accounts

04Service Mesh security integration including Istio mTLS policies

05Enforcement of Pod Security Standards at the namespace level

06OPA Gatekeeper ConstraintTemplates for custom admission control

ユースケース

01Hardening multi-tenant Kubernetes clusters for production environments

02Implementing zero-trust network architectures via default-deny policies

03Achieving compliance with CIS Kubernetes Benchmarks and NIST frameworks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add microck/ordinary-claude-skills k8s-security-policies

For use in Claude.ai and ChatGPT

Download Skill