How does it help with compliance?

The skill follows CIS Kubernetes Benchmarks and NIST frameworks, helping you implement required controls like audit logging, secrets encryption, and node authentication.

Can I use this for multi-tenant cluster isolation?

Absolutely. The skill provides specific templates for namespace-level isolation using NetworkPolicies and granular RBAC to ensure tenants cannot access each others' resources.

Does this skill support the latest Pod Security Standards?

Yes, it focuses on the modern Kubernetes Pod Security Standards (Privileged, Baseline, and Restricted) which have replaced the deprecated PodSecurityPolicy.

Does it include service mesh security?

Yes, it includes configurations for Istio, including PeerAuthentication for mTLS and AuthorizationPolicies for service-to-service access control.

Kubernetes Security Policy Pro

Name: Kubernetes Security Policy Pro
Author: HermeticOrmus

byHermeticOrmus

0•

Security & Testing

Implements production-grade Kubernetes security policies including NetworkPolicy, RBAC, and Pod Security Standards.

This skill provides a comprehensive framework for securing Kubernetes clusters by enforcing defense-in-depth principles. It enables developers and DevOps engineers to implement sophisticated network segmentation, least-privilege RBAC configurations, and strict Pod Security Standards. By leveraging industry benchmarks like CIS and NIST, the skill automates the creation of secure manifests, admission control policies via OPA Gatekeeper, and mTLS configurations for service meshes, ensuring clusters remain compliant and resilient against internal and external threats.

Key Features

01OPA Gatekeeper constraint template implementation

02Automated Pod Security Standard enforcement for namespaces

030 GitHub stars

04Granular NetworkPolicy configuration for microservices isolation

05Least-privilege RBAC role and binding generation

06Service mesh security via Istio mTLS and AuthorizationPolicies

Use Cases

01Securing multi-tenant Kubernetes clusters for production workloads

02Achieving compliance with CIS Kubernetes Benchmarks and NIST standards

03Implementing network segmentation to prevent lateral movement

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add hermeticormus/alqvimia-contador k8s-security-policies

For use in Claude.ai and ChatGPT

Download Skill