How does it assist with RBAC?

It generates granular Roles, ClusterRoles, and RoleBindings to ensure users and service accounts follow the principle of least privilege.

Can it help with network isolation?

Absolutely. It provides snippets for default-deny-all policies, cross-service communication rules, and DNS egress configurations.

Does this skill support the latest Pod Security Standards?

Yes, it includes templates for Privileged, Baseline, and Restricted profiles to replace the deprecated PodSecurityPolicy.

Is this compatible with OPA Gatekeeper?

Yes, the skill provides ConstraintTemplates and Constraints for implementing custom admission control logic within your cluster.

Does it handle Service Mesh security?

Yes, it includes Istio-specific configurations for PeerAuthentication (mTLS) and AuthorizationPolicies.

Kubernetes Security Policies

Name: Kubernetes Security Policies
Author: anton-abyzov

byanton-abyzov

보안 및 테스팅

Implements defense-in-depth Kubernetes security through network isolation, RBAC enforcement, and pod security standards.

소개

This skill empowers Claude to architect and implement production-grade security configurations for Kubernetes clusters. It provides standardized templates and implementation patterns for NetworkPolicies to control traffic flow, Pod Security Standards to enforce runtime constraints, and granular RBAC for least-privilege access. Whether you are securing a multi-tenant environment, achieving compliance with CIS benchmarks, or configuring OPA Gatekeeper policies, this skill ensures your infrastructure adheres to modern security best practices and defense-in-depth principles.

주요 기능

Least-privilege RBAC role and binding configuration
Namespace-level Pod Security Standard (PSS) implementation
0 GitHub stars
Automated NetworkPolicy generation for ingress and egress isolation
Admission control policy authoring with OPA Gatekeeper
Service Mesh security configuration using Istio mTLS and AuthorizationPolicies

사용 사례

Hardening production clusters for regulatory compliance like CIS or NIST
Enforcing secure container runtime defaults across all namespaces
Implementing network segmentation in multi-tenant environments

소개

주요 기능

Least-privilege RBAC role and binding configuration
Namespace-level Pod Security Standard (PSS) implementation
0 GitHub stars
Automated NetworkPolicy generation for ingress and egress isolation
Admission control policy authoring with OPA Gatekeeper
Service Mesh security configuration using Istio mTLS and AuthorizationPolicies

사용 사례

Hardening production clusters for regulatory compliance like CIS or NIST
Enforcing secure container runtime defaults across all namespaces
Implementing network segmentation in multi-tenant environments