k8s-security

What problem does it solve?

Audit Kubernetes RBAC configurations, enforce policies, and manage secrets across clusters and namespaces to reduce security risks and simplify compliance.

Core Features & Use Cases

• RBAC auditing: Inventory roles, bindings, and permissions to surface risky configurations.
• Policy enforcement: Integrate with Kyverno/Gatekeeper to validate and enforce security policies.
• Secret management: Review, restrict, and rotate secrets to minimize exposure.
• Use Case: Security teams perform routine RBAC reviews across multiple clusters, identify cluster-admin bindings, wildcard verbs, and secrets access for remediation.

Quick Start

Run the k8s-security skill with your MCP-enabled tooling to start an RBAC audit. Example: initialize an audit context, run get_cluster_role_bindings and get_role_bindings to collect findings, then review and remediate.