Does this support the latest Pod Security Standards?

Yes, it includes configurations for Privileged, Baseline, and Restricted standards, which are the current standards replacing the deprecated PodSecurityPolicies.

Does it work with service meshes like Istio?

Yes, the skill includes templates for Istio PeerAuthentication and AuthorizationPolicies to enforce mTLS and service-to-service security.

Can I use this for multi-tenant isolation?

Absolutely. It provides specific patterns for network segmentation and RBAC isolation specifically designed for multi-tenant environments.

How does it help with security compliance?

It implements controls aligned with CIS Kubernetes Benchmarks and NIST frameworks, focusing on encryption at rest, audit logging, and least-privilege access.

Kubernetes Security Policies

Name: Kubernetes Security Policies
Author: as4584

byas4584

0•

Security & Testing

Implements defense-in-depth security for Kubernetes clusters through NetworkPolicies, RBAC, and Pod Security Standards.

This skill provides a comprehensive framework for securing Kubernetes environments by enforcing strict network isolation, least-privilege access controls, and pod security standards. It guides users through creating default-deny network policies, configuring granular RBAC for users and service accounts, and implementing advanced admission controls with OPA Gatekeeper or Istio. Ideal for production-grade clusters, it helps ensure compliance with CIS Benchmarks and NIST frameworks while maintaining operational efficiency and security best practices.

Key Features

010 GitHub stars

02Service mesh security configuration with Istio mTLS and AuthorizationPolicies

03Advanced admission control using OPA Gatekeeper ConstraintTemplates

04Granular NetworkPolicy templates for default-deny and traffic segmentation

05Namespace-level Pod Security Standards (Privileged, Baseline, Restricted)

06Least-privilege RBAC configuration for users and service accounts

Use Cases

01Hardening a multi-tenant Kubernetes cluster for production use

02Achieving compliance with CIS Kubernetes Benchmarks and NIST frameworks

03Implementing network segmentation between frontend and backend microservices

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add as4584/antigravity-skills k8s-security-policies

For use in Claude.ai and ChatGPT

Download Skill