How does it help with network isolation?

It provides templates for 'Default Deny All' policies and specific allow-lists for frontend-to-backend traffic and DNS resolution to prevent lateral movement.

Can I use this for RBAC audits?

Yes, it includes troubleshooting commands and patterns for checking effective permissions (auth can-i) to ensure least-privilege access is maintained.

Does this skill support the deprecated PodSecurityPolicy?

While the industry is moving away from PSP, this skill focuses on modern replacements: the native Pod Security Standards (PSS) and admission controllers like OPA Gatekeeper.

Is Istio security included?

Yes, the skill includes PeerAuthentication for mTLS and AuthorizationPolicy templates for service-to-service security within a mesh.

Kubernetes Security Policies

Name: Kubernetes Security Policies
Author: Activer007

byActiver007

0•

セキュリティとテスト

Implements production-grade Kubernetes security configurations including NetworkPolicies, RBAC, and Pod Security Standards.

This skill provides a comprehensive framework for securing Kubernetes clusters by applying defense-in-depth principles. It enables developers and DevOps engineers to implement granular network isolation, enforce least-privilege access control via RBAC, and apply standardized Pod Security Standards across namespaces. Whether you are hardening a multi-tenant environment, preparing for a security audit like CIS or NIST, or configuring advanced policy enforcement with OPA Gatekeeper and Istio, this skill provides the templates and best practices needed to ensure a robust security posture.

主な機能

01Automated generation of NetworkPolicies for network segmentation

02Security context enforcement for rootless and read-only container runtimes

03Least-privilege RBAC configuration for users and service accounts

040 GitHub stars

05OPA Gatekeeper and Istio service mesh security policy templates

06Implementation of Kubernetes Pod Security Standards (Baseline and Restricted)

ユースケース

01Hardening multi-tenant Kubernetes clusters for production environments

02Implementing Zero Trust network security using default-deny policies and mTLS

03Achieving compliance with CIS Kubernetes Benchmarks and NIST frameworks

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add activer007/ordinary-claude-skills k8s-security-policies

For use in Claude.ai and ChatGPT

Download Skill