概要
This skill provides a comprehensive framework for securing Kubernetes clusters through multi-layered defense strategies. It offers ready-to-use templates and best practices for configuring network isolation, enforcing Pod Security Standards (Privileged, Baseline, Restricted), and managing fine-grained access control with RBAC. Whether you are implementing admission control with OPA Gatekeeper, configuring Istio mTLS, or hardening pod security contexts for compliance, this skill ensures your infrastructure meets industry security benchmarks like CIS and NIST while preventing unauthorized lateral movement and privilege escalation.
