Can it help if my pods lose DNS resolution after applying policies?

Yes, the skill includes specific error handling to identify DNS issues and generate the necessary egress rules for kube-dns or CoreDNS.

Can it generate default-deny policies?

Yes, it can generate manifests for both default-deny-ingress and default-deny-egress to establish a secure 'deny-by-default' posture.

Does this skill require a specific Kubernetes network plugin?

Yes, your cluster must have a network plugin (CNI) that supports NetworkPolicy enforcement, such as Calico, Cilium, or Weave.

How does it target specific pods for firewall rules?

It uses podSelector and namespaceSelector logic based on your existing labels to ensure policies are applied accurately to the intended workloads.

Network Policy Manager

Name: Network Policy Manager
Author: jeremylongshore

byjeremylongshore

•

1,206

デプロイメントとDevOps

Generates and manages Kubernetes NetworkPolicy manifests to enforce zero-trust security and least-privilege pod communication.

概要

The Network Policy Manager skill automates the complex task of securing Kubernetes clusters by generating precise NetworkPolicy manifests for ingress and egress traffic. It follows industry-standard zero-trust principles, allowing you to restrict pod-to-pod communication, isolate namespaces, and configure granular firewall rules using label selectors. Beyond manifest creation, the skill provides essential troubleshooting support for common networking issues such as DNS resolution failures, label mismatches, and unexpected traffic blocks, ensuring your infrastructure remains secure without disrupting application connectivity.

主な機能

Automated generation of Kubernetes NetworkPolicy manifests for ingress and egress
Advanced traffic targeting using pod and namespace label selectors
Pre-configured templates for default-deny and external service access
Automated troubleshooting for connectivity and DNS resolution issues
1,206 GitHub stars
Implementation of zero-trust and least-privilege networking principles

ユースケース

Restricting production database access to specific application backend pods only
Implementing a global default-deny-all ingress policy across sensitive namespaces
Configuring egress rules to allow traffic only to authorized external APIs and third-party services

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills managing-network-policies

For use in Claude.ai and ChatGPT

Download Skill

GitHub

概要