infra-kubernetes-security-audit

What problem does it solve?

This Skill helps you identify Kubernetes security weaknesses by systematically auditing RBAC, Pod Security Standards, NetworkPolicy coverage, and secret/image/supply-chain protections before incidents happen.

Core Features & Use Cases

• RBAC Review: Detect overly permissive ClusterRoleBindings/RoleBindings and verify service accounts follow least-privilege principles.
• Pod Security & Misconfiguration Checks: Validate Pod Security Admission settings and spot privileged or root-running workloads.
• Defense-in-Depth Controls: Assess NetworkPolicy defaults, secret handling (external secrets + encryption at rest), image vulnerability scanning, admission controller enforcement, and audit logging against CIS expectations.
• Use Case: Before onboarding a new team or service, run an audit to confirm that the namespace enforces restricted policies, the service account cannot overreach, the network is default-deny, and secrets/images meet security requirements.

Quick Start

Ask an AI to produce an audit plan and actionable kubectl/manifest checks for a Kubernetes cluster targeting namespace RBAC, Pod Security Standard enforcement, NetworkPolicy posture, and secret/image scanning.