skills.rest
jamesogunsan
jamesogunsanCOMMUNITY
Explore all skills by this author →
GitHub

k8s-security-policies

Generate Kubernetes NetworkPolicy, PodSecurity, and RBAC YAML templates.

Updated Mar 29, 2026
Search Tags:#rbac#kubernetes#k8s#cluster-hardening#network-policy#pod-security#admission-control
One-click install
npx skills add https://github.com/jamesogunsan/prod-eng-skills --skill k8s-security-policies-jamesogunsan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: k8s-security-policies
Source: https://github.com/jamesogunsan/prod-eng-skills/tree/main/plugins/kubernetes-operations/skills/k8s-security-policies
Command: npx skills add https://github.com/jamesogunsan/prod-eng-skills --skill k8s-security-policies-jamesogunsan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) and references (resource) components.

What problem does it solve?

Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC to enforce isolation and least privilege in production-grade clusters, reducing attack surface and misconfigurations.

Core Features & Use Cases

  • NetworkPolicy to isolate workloads across namespaces and tiers
  • PodSecurity Standards / PodSecurityPolicy guidance to enforce container security practices
  • RBAC patterns for least-privilege access and auditable permissions
  • Templates and references for deploying secure configurations in production

Quick Start

Apply the included YAML templates and examples to enable network isolation, pod security standards, and RBAC in your cluster.

Frequently Asked Questions about k8s-security-policies

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Kubernetes NetworkPolicy to isolate workloads across namespaces?▼

Kubernetes NetworkPolicy isolates workloads by applying YAML templates that restrict traffic across namespaces and tiers. This Skill provides template-based policies with namespace scope to enforce network isolation in production clusters.

What is the best way to enforce least-privilege RBAC in a multi-tenant Kubernetes cluster?▼

Least-privilege RBAC in a multi-tenant Kubernetes cluster is enforced using integrated RBAC patterns that ensure auditable permissions. This Skill provides configurations targeting multi-tenant environments requiring strict access controls.

How do I implement Pod Security Standards to enforce container security practices?▼

Pod Security Standards enforce container security practices by applying configuration templates that replace PodSecurityPolicy guidance. This Skill offers references and YAML examples to implement these standards in production-grade clusters.

Can I use these Kubernetes security policies for cluster hardening in production environments?▼

These Kubernetes security policies are designed for cluster hardening in production environments. They provide defense-in-depth through NetworkPolicy, Pod Security Standards, and RBAC configurations to reduce attack surface and misconfigurations.

Does this Skill support admission control configurations for Kubernetes security?▼

Admission control for Kubernetes security is supported through policy enforcement templates that validate pod security standards and RBAC rules. The Skill includes YAML examples and references for implementing these admission control mechanisms.

What are the limitations of using template-based Kubernetes security policies?▼

Template-based Kubernetes security policies require manual adaptation to match specific cluster architectures and multi-tenant requirements. Users must modify the provided YAML examples and namespace-scoped templates to fit their production environment's unique isolation needs.

Related Skills

Explore More Software Engineering Skills→
sandeshbagmaresandeshbagmare

k8s-security-policies

Implement Kubernetes NetworkPolicy, PodSecurityPolicy, and RBAC configurations.

Community
Advanced
duanbiao2000duanbiao2000
3

k8s-security-policies

Automate Kubernetes cluster security with NetworkPolicy, PodSecurity Standards, and RBAC.

Community
Advanced
martinholovskymartinholovsky
45

cilium-expert

Configure Cilium CNI, network policies, and Hubble observability for Kubernetes.

Community
Advanced
p-o-ke-naep-o-ke-nae

k8s-security-policies

Implement Kubernetes security policies for network isolation, pod hardening, and least-privilege access.

Community
Advanced