Does this skill support the latest Kubernetes security features?

Yes, it implements modern Pod Security Standards (PSS) which have replaced the deprecated PodSecurityPolicies in current Kubernetes versions.

How does it help with security compliance?

The skill follows best practices aligned with the CIS Kubernetes Benchmark and NIST frameworks, focusing on defense-in-depth and least-privilege principles.

Can I use this for multi-tenant cluster isolation?

Absolutely. The skill provides specific patterns for network isolation and namespace-scoped RBAC to ensure secure multi-tenancy.

Does it provide support for Service Mesh security?

Yes, it includes templates for Istio mTLS (PeerAuthentication) and AuthorizationPolicies to secure traffic within a mesh.

Kubernetes Security Policies

Name: Kubernetes Security Policies
Author: HermeticOrmus

byHermeticOrmus

0•

セキュリティとテスト

Implements defense-in-depth security for Kubernetes clusters through production-ready network isolation, RBAC, and pod security standards.

This skill provides a comprehensive framework for securing Kubernetes environments by automating the creation and enforcement of critical security layers. It enables developers and DevOps engineers to implement sophisticated NetworkPolicies for traffic isolation, configure granular RBAC roles for least-privilege access, and apply Pod Security Standards at the namespace level. Beyond standard Kubernetes resources, it supports advanced policy enforcement via OPA Gatekeeper and Istio service mesh security, making it an essential tool for hardening multi-tenant clusters and meeting enterprise compliance requirements like CIS Benchmarks.

主な機能

01OPA Gatekeeper ConstraintTemplate implementation for admission control

02Granular RBAC Role and ClusterRole configuration patterns

03NetworkPolicy generation for ingress/egress traffic isolation

04Istio PeerAuthentication and AuthorizationPolicy for service mesh security

05Namespace-level Pod Security Standard enforcement (Baseline/Restricted)

060 GitHub stars

ユースケース

01Configuring least-privilege access for developers and service accounts

02Implementing network segmentation between frontend and backend microservices

03Hardening production Kubernetes clusters for compliance and audits

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hermeticormus/hermetic-line k8s-security-policies

For use in Claude.ai and ChatGPT

Download Skill