How does it handle Pod Security?

It helps you implement the modern Pod Security Standards (PSS) framework using namespace labels to enforce or audit Privileged, Baseline, or Restricted security profiles.

How does this skill help with Kubernetes compliance?

It provides pre-configured templates and guidance for meeting CIS Benchmarks and NIST frameworks, including patterns for audit logging, encryption, and node authentication.

Can I use this for multi-tenant environments?

Yes, it includes specific patterns for namespace isolation, default-deny network policies, and granular RBAC to ensure different tenants cannot access each other's resources.

Does it support Service Mesh security?

Absolutely. It includes Istio-specific configurations for PeerAuthentication to enforce mTLS and fine-grained AuthorizationPolicies for service-to-service communication.

Kubernetes Security Policies

Name: Kubernetes Security Policies
Author: HermeticOrmus

byHermeticOrmus

•

安全与测试

Implements robust, production-grade security layers for Kubernetes clusters through network isolation, access controls, and pod security standards.

This skill provides Claude with specialized knowledge to harden Kubernetes environments using a defense-in-depth approach. It facilitates the implementation of granular NetworkPolicies for traffic segmentation, defines Pod Security Standards (PSS) for namespace-level enforcement, and configures least-privilege RBAC to secure cluster access. Additionally, it offers templates for admission control via OPA Gatekeeper and service mesh security with Istio, ensuring that infrastructure remains compliant with frameworks like CIS and NIST while simplifying the management of complex security manifests.

主要功能

014 GitHub stars

02Service mesh security configurations for Istio mTLS and AuthorizationPolicies

03Configuration of Pod Security Standards including Privileged, Baseline, and Restricted modes

04Standardized RBAC templates for fine-grained User and ServiceAccount permissions

05Admission control policies using OPA Gatekeeper ConstraintTemplates

06Implementation of NetworkPolicies for default-deny and granular traffic flows

使用场景

01Hardening container environments to meet CIS Kubernetes Benchmark compliance requirements

02Securing a multi-tenant production cluster through namespace isolation and strict RBAC

03Enforcing runtime security best practices such as non-root execution and read-only filesystems

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hermeticormus/claude-code-game-development k8s-security-policies

For use in Claude.ai and ChatGPT

Download Skill