k8s-security-policies

Implement Kubernetes NetworkPolicy, Pod Security Standards, and RBAC configurations.

Updated Mar 18, 2026
One-click install
npx skills add https://github.com/ekremmkasap/jarvis --skill k8s-security-policies-ekremmkasap
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: k8s-security-policies
Source: https://github.com/ekremmkasap/jarvis/tree/main/server/agent_prompts/wshobson/plugins/kubernetes-operations/skills/k8s-security-policies
Command: npx skills add https://github.com/ekremmkasap/jarvis --skill k8s-security-policies-ekremmkasap

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) and references (resource) components.

What problem does it solve?

Implement Kubernetes security policies to defend clusters with NetworkPolicy, PodSecurity Standards, and RBAC, ensuring defense-in-depth and compliance.

Core Features & Use Cases

  • NetworkPolicy templates and examples to isolate traffic between pods.
  • Pod Security Standards guidance to enforce non-privileged execution and secure contexts.
  • RBAC configuration patterns and Role/ClusterRole examples for least-privilege access.

Quick Start

Install and apply the provided manifests to bootstrapped clusters and adapt templates to your namespace.

Frequently Asked Questions about k8s-security-policies

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce Kubernetes network policies to isolate traffic between pods?

Kubernetes network policies isolate pod traffic by applying NetworkPolicy templates that restrict ingress and egress communication. The provided manifests offer ready-to-apply configurations to secure multi-tenant production clusters.

What are Pod Security Standards and how do they enforce non-privileged execution?

Pod Security Standards enforce non-privileged execution by defining secure contexts for pods. They replace PodSecurityPolicy configurations to ensure containers run without unnecessary privileges across your cluster namespaces.

Can I use these RBAC patterns for least-privilege access control in a multi-tenant cluster?

Yes, the RBAC patterns provide Role and ClusterRole examples designed for least-privilege access control. These configurations ensure multi-tenant isolation by restricting user and service account permissions to required resources only.

How do I apply defense-in-depth security policies to a bootstrapped Kubernetes cluster?

Apply defense-in-depth security policies by installing the provided manifests into a bootstrapped cluster. Adapt the NetworkPolicy, Pod Security Standards, and RBAC templates to your namespaces to achieve policy-driven compliance.

Do I need a production-grade Kubernetes environment to use these policy templates?

The policy templates are designed for production-grade Kubernetes environments requiring defense-in-depth and multi-tenant isolation. However, the manifests can be adapted and applied to any bootstrapped cluster namespace for testing.