Implement production-grade Kubernetes security using NetworkPolicies, Pod Security Standards, and RBAC.
This skill enables Claude to architect and implement comprehensive security layers within Kubernetes clusters. It provides standardized patterns for network isolation via NetworkPolicy, access control through least-privilege RBAC, and workload security using Pod Security Standards (Privileged, Baseline, and Restricted). By integrating advanced enforcement tools like OPA Gatekeeper and service mesh security with Istio, this skill ensures that your infrastructure adheres to defense-in-depth principles and compliance frameworks like CIS Benchmarks and NIST.
主な機能
01NetworkPolicy implementation for granular traffic isolation
02OPA Gatekeeper constraint templates for admission control
03Service Mesh (Istio) mTLS and authorization policies
