Kubernetes & OpenShift Security Hardening

关于

This skill empowers Claude to perform comprehensive security audits and implement industry-standard hardening for Kubernetes and OpenShift environments. It provides specialized guidance on Pod Security Standards (PSS), Role-Based Access Control (RBAC) optimization, zero-trust NetworkPolicies, and secure secrets management using tools like External Secrets and Sealed Secrets. Whether you are conducting a CIS benchmark scan with kube-bench or configuring Security Context Constraints (SCC) for OpenShift, this skill ensures your container orchestration layer remains compliant with SOC2, PCI-DSS, and modern security best practices.

主要功能

• Implementation of Pod Security Admission (PSA) and custom Kyverno/Gatekeeper policies.
• Secure secrets orchestration with HashiCorp Vault, External Secrets, and Sealed Secrets.
• Zero-trust network security via granular NetworkPolicies and ingress controls.
• 4 GitHub stars
• Automated security assessment and compliance auditing using Trivy, kubescape, and kube-bench.
• Least-privilege RBAC configuration and automated permission auditing for service accounts.

使用场景

• Hardening OpenShift environments using specialized Security Context Constraints (SCCs).
• Auditing a production cluster against CIS benchmarks and Pod Security Standards (PSS).
• Investigating security incidents and misconfigurations in containerized workloads.