skills.rest
spigell
spigellCOMMUNITY
Explore all skills by this author →
GitHub

k8s-security

Audit Kubernetes RBAC permissions, policy compliance, secrets access, and network isolation.

Updated Aug 27, 2026
Search Tags:#kubernetes#gatekeeper#secret-management#policy-enforcement#network-policies#kyverno#rbac-audit
One-click install
npx skills add https://github.com/spigell/my-agents --skill k8s-security-spigell
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: k8s-security
Source: https://github.com/spigell/my-agents/tree/main/agents/shared/src/tools/ask_kubernetes_expert/skills/k8s-security
Command: npx skills add https://github.com/spigell/my-agents --skill k8s-security-spigell

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Kubernetes security reviews are hard to perform consistently because RBAC permissions, policy compliance, secret access, and network isolation must be checked across many resource types and namespaces.

Core Features & Use Cases

  • RBAC auditing: Audit cluster-admin bindings, roles, role bindings, and service account permissions to identify overly broad access and risky patterns.
  • Policy compliance checks: Review Kyverno and OPA Gatekeeper policy state to support security governance and enforcement readiness.
  • Secrets and network validation: Assess secret access permissions and verify network isolation using Kubernetes and Cilium network policy data.

Quick Start

Use k8s-security to audit a namespace named "prod" for RBAC over-permissioning, policy compliance gaps, and secret access risks.

Frequently Asked Questions about k8s-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Kubernetes RBAC permissions for overly broad access?▼

Auditing Kubernetes RBAC permissions involves analyzing cluster-admin bindings, roles, role bindings, and service accounts to identify overly broad access and risky permission patterns across namespaces.

Can I check Kyverno and OPA Gatekeeper policy compliance in a Kubernetes cluster?▼

Yes, you can check Kyverno and OPA Gatekeeper policy compliance by reviewing the policy state to support security governance and verify enforcement readiness across your Kubernetes environments.

How do I validate Kubernetes network isolation and secret access risks?▼

Validating Kubernetes network isolation and secret access requires assessing secret permissions and verifying network policies using Kubernetes and Cilium network policy data to ensure proper segmentation.

Does this Kubernetes security audit work across multi-cluster contexts?▼

Yes, Kubernetes security audits can be performed across namespaces and multi-cluster contexts to comprehensively verify RBAC permissions, policy compliance, and secret management risks.

What is the best way to perform a Kubernetes security review consistently?▼

The best way to perform a Kubernetes security review consistently is to systematically check RBAC permissions, policy compliance, secret access, and network isolation across all relevant resource types and namespaces.

Related Skills

Explore More Legal & Compliance Skills→
rohitg00rohitg00
944

k8s-security

Audit Kubernetes RBAC configurations and enforce security policies across clusters.

Community
Basic
TheBushidoCollectiveTheBushidoCollective
187

kubernetes-security

Enforce Kubernetes security hardening for deployments with RBAC, pod security, and network policies.

Official
Advanced
altrupetsaltrupets

Network Policies & Security

Manage Kubernetes network policies to control pod and namespace traffic flows.

Official
Advanced
benphamsebenphamse

terraform-module-library

Design reusable Terraform modules for AWS, Azure, and GCP with standardized structure.

Community
Advanced