Implements production-grade Kubernetes security using NetworkPolicies, RBAC, and Pod Security Standards.
This skill provides a comprehensive framework for securing Kubernetes clusters by implementing defense-in-depth strategies. It guides developers and SREs through the creation of network isolation rules, least-privilege RBAC configurations, and namespace-level pod security enforcement, ensuring clusters meet modern compliance and safety standards. Whether you are setting up multi-tenant environments or hardening individual microservices, this skill offers standardized templates for OPA Gatekeeper, Istio service mesh, and native Kubernetes security primitives.
Key Features
010 GitHub stars
02Pod Security Standards enforcement (Baseline and Restricted)
03Istio Service Mesh mTLS and AuthorizationPolicy implementation
04NetworkPolicy templates for ingress and egress isolation
05Least-privilege RBAC Role and ClusterRole configuration
06OPA Gatekeeper constraint templates for custom policy enforcement
Use Cases
01Implementing network segmentation between microservices
02Configuring secure RBAC for CI/CD and service accounts
03Hardening production Kubernetes clusters for compliance
