Can I use this for multi-tenant cluster isolation?

Absolutely. The skill provides specific patterns for namespace-level RBAC and NetworkPolicies designed to isolate workloads in multi-tenant environments.

How does it help with security compliance?

It provides configurations aligned with the CIS Kubernetes Benchmark and NIST Cybersecurity Framework, helping you meet industry audit requirements.

Does this skill support the latest Pod Security Standards?

Yes, it includes templates and implementation guides for Privileged, Baseline, and Restricted standards which have replaced the deprecated PodSecurityPolicies.

Does it work with service meshes like Istio?

Yes, the skill includes configurations for Istio PeerAuthentication and AuthorizationPolicies to manage mTLS and service-level access control.

Kubernetes Security Policies

Name: Kubernetes Security Policies
Author: HermeticOrmus

byHermeticOrmus

•

Security & Testing

Implements production-grade Kubernetes security configurations including NetworkPolicies, Pod Security Standards, and RBAC to harden cluster environments.

This skill empowers Claude to architect and implement comprehensive defense-in-depth security for Kubernetes clusters. It provides standardized templates and implementation patterns for network segmentation via NetworkPolicies, access control through RBAC, and workload hardening using the latest Pod Security Standards (Privileged, Baseline, Restricted). Beyond basic configuration, it supports advanced security tooling like OPA Gatekeeper for admission control and Istio for service mesh security, ensuring clusters meet CIS Benchmarks and NIST compliance frameworks while providing essential troubleshooting guidance for common policy conflicts.

Key Features

01Configuration of ingress and egress NetworkPolicies for network isolation

022 GitHub stars

03Automated generation of least-privilege RBAC Roles and RoleBindings

04OPA Gatekeeper ConstraintTemplates for custom policy enforcement

05Implementation of Pod Security Standards (PSS) at the namespace level

06Service mesh security configuration using Istio mTLS and AuthorizationPolicies

Use Cases

01Hardening container workloads to meet CIS Kubernetes Benchmarks

02Implementing automated policy enforcement and admission control with OPA Gatekeeper

03Securing a multi-tenant production cluster using network segmentation and RBAC

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hermeticormus/libreuiux-claude-code k8s-security-policies

For use in Claude.ai and ChatGPT

Download Skill