skills.rest
wesleyegberto
wesleyegbertoCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

k8s-security-policies

Implement Kubernetes security policies for network isolation, pod security, and RBAC.

3|2|Updated Mar 23, 2026
Search Tags:#security#rbac#kubernetes#network-policy#admission-control#policy-management#pod-security-standards
One-click install
npx skills add https://github.com/wesleyegberto/software-engineering-skills --skill k8s-security-policies-wesleyegberto
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: k8s-security-policies
Source: https://github.com/wesleyegberto/software-engineering-skills/tree/main/plugins/devops/skills/k8s-security-policies
Command: npx skills add https://github.com/wesleyegberto/software-engineering-skills --skill k8s-security-policies-wesleyegberto

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) and references (resource) components.

What problem does it solve?

Implement Kubernetes security policies to protect clusters from misconfigurations and unauthorized access, standardizing network isolation, pod security, and RBAC controls.

Core Features & Use Cases

  • NetworkPolicy templates and examples to isolate traffic between namespaces and workloads.
  • Pod Security Standards guidance to enforce running containers with restricted rights and secure defaults.
  • RBAC configurations and best practices to grant least-privilege access and manage roles across namespaces.
  • Guidance on admission control using policy engines like OPA Gatekeeper or Kyverno to enforce policy at creation time.

Quick Start

Apply the provided templates and examples to implement network policies, Pod Security Standards, and RBAC across your Kubernetes namespaces.

Frequently Asked Questions about k8s-security-policies

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce Kubernetes security policies to isolate traffic between namespaces?▼

To enforce Kubernetes security policies for traffic isolation, you apply NetworkPolicy templates that restrict communication between specific workloads and namespaces. This standardizes network isolation across multi-tenant clusters to prevent unauthorized lateral movement.

What is the best way to implement least-privilege RBAC configurations across Kubernetes namespaces?▼

Implementing least-privilege RBAC configurations involves applying role-based access control templates to grant only necessary permissions. This standardizes access management across namespaces, protecting clusters from unauthorized access and misconfigurations.

How do I enforce Pod Security Standards to ensure containers run with restricted rights?▼

To enforce Pod Security Standards with restricted rights, you apply provided configuration templates that set secure defaults for container execution. This prevents privileged access and standardizes pod security across your environments.

Can I use OPA Gatekeeper or Kyverno to enforce admission control policies at creation time?▼

Yes, you can use policy engines like OPA Gatekeeper or Kyverno for admission control to enforce policies at resource creation time. This blocks unauthorized deployments and misconfigurations before they enter the cluster.

Does this approach support securing multi-tenant Kubernetes clusters?▼

Yes, this approach supports securing multi-tenant Kubernetes clusters by applying network isolation, Pod Security Standards, and RBAC configurations. These combined policies protect against unauthorized access and standardize security controls across shared environments.

Related Skills

PriyanshKuniyalPriyanshKuniyal

k8s-security-policies

Implement network policies, pod security standards, and RBAC in Kubernetes clusters.

Community
Advanced
foxj77foxj77
18

kyverno-troubleshooting

Diagnose Kyverno policy violations and admission webhook failures in Kubernetes clusters.

Community
Advanced
AngelP17AngelP17
1

k8s-security-policies

Implement Kubernetes NetworkPolicy, PodSecurityPolicy, and RBAC security controls.

Community
Advanced
williamzujkowskiwilliamzujkowski
17

zero-trust-security

Implement zero-trust security with mTLS and SPIFFE/SPIRE in Kubernetes.

Community
Advanced