How does it assist with RBAC?

It generates granular Roles, ClusterRoles, and RoleBindings to ensure users and service accounts follow the principle of least privilege.

Can it help with network isolation?

Absolutely. It provides snippets for default-deny-all policies, cross-service communication rules, and DNS egress configurations.

Does this skill support the latest Pod Security Standards?

Yes, it includes templates for Privileged, Baseline, and Restricted profiles to replace the deprecated PodSecurityPolicy.

Is this compatible with OPA Gatekeeper?

Yes, the skill provides ConstraintTemplates and Constraints for implementing custom admission control logic within your cluster.

Does it handle Service Mesh security?

Yes, it includes Istio-specific configurations for PeerAuthentication (mTLS) and AuthorizationPolicies.

Kubernetes Security Policies

Name: Kubernetes Security Policies
Author: anton-abyzov

byanton-abyzov

0•

Security & Testing

Implements defense-in-depth Kubernetes security through network isolation, RBAC enforcement, and pod security standards.

This skill empowers Claude to architect and implement production-grade security configurations for Kubernetes clusters. It provides standardized templates and implementation patterns for NetworkPolicies to control traffic flow, Pod Security Standards to enforce runtime constraints, and granular RBAC for least-privilege access. Whether you are securing a multi-tenant environment, achieving compliance with CIS benchmarks, or configuring OPA Gatekeeper policies, this skill ensures your infrastructure adheres to modern security best practices and defense-in-depth principles.

Key Features

01Least-privilege RBAC role and binding configuration

02Namespace-level Pod Security Standard (PSS) implementation

030 GitHub stars

04Automated NetworkPolicy generation for ingress and egress isolation

05Admission control policy authoring with OPA Gatekeeper

06Service Mesh security configuration using Istio mTLS and AuthorizationPolicies

Use Cases

01Hardening production clusters for regulatory compliance like CIS or NIST

02Enforcing secure container runtime defaults across all namespaces

03Implementing network segmentation in multi-tenant environments

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add anton-abyzov/sw-soccer-manager k8s-security-policies

For use in Claude.ai and ChatGPT

Download Skill