k8s-security-policies

Implement Kubernetes NetworkPolicy, PodSecurityPolicy, and RBAC security policies.

Updated Feb 13, 2026
One-click install
npx skills add https://github.com/mwathiben/PropManager --skill k8s-security-policies-mwathiben
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: k8s-security-policies
Source: https://github.com/mwathiben/PropManager/tree/main/.claude/skills/k8s-security-policies
Command: npx skills add https://github.com/mwathiben/PropManager --skill k8s-security-policies-mwathiben

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) and references (resource) components.

What problem does it solve?

Provides a structured approach to securing Kubernetes deployments by outlining NetworkPolicy, PodSecurityPolicy, and RBAC configurations to enforce defense-in-depth across clusters.

Core Features & Use Cases

  • NetworkPolicy templates and best practices for isolating workloads.
  • Pod security standards and namespace-level controls to prevent privilege escalation.
  • RBAC patterns and RoleBindings to enforce least-privilege access across environments.
  • Reference materials and example manifests for quick adoption in production.

Quick Start

Apply the included policy templates and RBAC references to establish baseline security in your cluster.

Frequently Asked Questions about k8s-security-policies

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Kubernetes NetworkPolicy to isolate workloads in a multi-tenant cluster?

Kubernetes NetworkPolicy isolates workloads by controlling pod-to-pod and pod-to-network traffic flows. This Skill provides structured YAML templates and best practices to enforce network segmentation and restrict lateral movement across multi-tenant namespaces.

What are the best practices for implementing RBAC least-privilege access in Kubernetes?

RBAC least-privilege access restricts cluster permissions to only what specific identities require. This Skill delivers RoleBinding patterns and reference manifests to configure granular access control across environments and prevent privilege escalation.

How do I enforce pod security standards to prevent privilege escalation in production deployments?

Pod security standards prevent privilege escalation by enforcing namespace-level controls on pod specifications. This Skill supplies reference materials and example manifests to configure baseline security policies and block privileged container execution.

Do I need pre-existing manifests to apply these Kubernetes security policies?

No pre-existing manifests are required to apply these Kubernetes security policies. This Skill includes reference files and ready-to-use YAML templates that you can quickly apply to establish baseline defense-in-depth security across your namespaces and deployments.

What is defense-in-depth in Kubernetes and how do these policies enforce it?

Defense-in-depth in Kubernetes layers multiple security controls to protect cluster resources. This Skill enforces it by combining NetworkPolicy for network segmentation, PodSecurityPolicy for pod hardening, and RBAC for granular access control across deployments.

Can I use these policy templates for multi-tenant environments requiring strict network segmentation?

Yes, these policy templates target production-grade, multi-tenant environments requiring strict network segmentation. They provide structured guidelines to enforce pod security standards, isolate workloads, and apply granular access control across isolated namespaces.