How does this skill help with NetworkPolicies?

It provides ready-to-use templates for default-deny-all policies and specific ingress/egress rules to control traffic between services and external resources.

Can I use this for RBAC management?

Yes, the skill includes standard patterns for namespace-scoped Roles and cluster-wide ClusterRoles based on the principle of least privilege.

Does it support Pod Security Admission?

Absolutely, it provides configuration snippets for labeling namespaces with Privileged, Baseline, and Restricted security levels according to K8s standards.

What about external policy engines like OPA Gatekeeper?

The skill includes ConstraintTemplates and Constraints to help you implement custom policy enforcement for things like required labels or image registries.

Kubernetes Security Policies

Name: Kubernetes Security Policies
Author: HermeticOrmus

byHermeticOrmus

0•

보안 및 테스팅

Implements production-grade Kubernetes security through NetworkPolicies, RBAC, and Pod Security Standards to ensure cluster-wide defense-in-depth.

This skill provides a comprehensive framework for securing Kubernetes clusters by enforcing least-privilege access and network isolation. It helps developers and SREs implement critical security layers including namespace-level Pod Security Standards, fine-grained RBAC configurations, and complex NetworkPolicies. Beyond standard Kubernetes resources, it integrates advanced security tools like OPA Gatekeeper for policy enforcement and Istio for service mesh security, ensuring clusters meet industry compliance standards like the CIS Kubernetes Benchmark.

주요 기능

01Automated generation of NetworkPolicies for network segmentation

02Hardened Pod Security Context configurations for container isolation

03OPA Gatekeeper ConstraintTemplate and Constraint definitions

04Namespace-level Pod Security Standard configuration (Baseline/Restricted)

05Least-privilege RBAC role and binding templates

060 GitHub stars

사용 사례

01Hardening a multi-tenant Kubernetes cluster for production environments

02Enforcing organizational compliance standards using OPA Gatekeeper constraints

03Implementing network isolation between microservices to prevent lateral movement

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hermeticormus/after-the-third-cup k8s-security-policies

For use in Claude.ai and ChatGPT

Download Skill