kubernetes-security

Enforce Kubernetes RBAC, NetworkPolicy, and pod security standards.

7|Updated Feb 14, 2026
One-click install
npx skills add https://github.com/KentoShimizu/sw-agent-skills --skill kubernetes-security-kentoshimizu
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: kubernetes-security
Source: https://github.com/KentoShimizu/sw-agent-skills/tree/main/skills/kubernetes-security
Command: npx skills add https://github.com/KentoShimizu/sw-agent-skills --skill kubernetes-security-kentoshimizu

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) and assets (resource) components.

What problem does it solve?

Kubernetes security risk management and policy enforcement often require coordinated RBAC, network isolation, and secret handling to prevent breaches in production.

Core Features & Use Cases

  • Define RBAC and NetworkPolicy baselines to enforce least privilege and explicit network access.
  • Implement pod security standards and secret lifecycle controls to minimize exposure.
  • Use Case: Before production exposure, define and verify security controls for clusters and workloads.

Quick Start

Apply the Kubernetes security baselines to your cluster to begin enforcing controls immediately.

Frequently Asked Questions about kubernetes-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce Kubernetes security controls to reduce blast radius?

Enforce Kubernetes security controls by defining RBAC and NetworkPolicy baselines, implementing pod security standards, and managing secret lifecycles to reduce blast radius and prevent privilege escalation.

What is the best way to configure RBAC and NetworkPolicy baselines for least privilege?

The best way to configure RBAC and NetworkPolicy baselines is to enforce least privilege and explicit network access, applying defined security controls before production exposure to minimize vulnerabilities.

How do I implement pod security standards for workload isolation?

Implement pod security standards for workload isolation by applying security baselines to your cluster, ensuring workloads are isolated and exposure is minimized across development and production environments.

Can I use these Kubernetes security baselines across development and production environments?

Yes, you can apply Kubernetes security baselines across both development and production environments to enforce admission controls, verify security workflows, and ensure consistent workload isolation.

How do I handle secret lifecycle policies to prevent breaches in production?

Handle secret lifecycle policies by implementing explicit secret handling and lifecycle controls, minimizing exposure and preventing unauthorized access to secrets in production environments.

What Kubernetes admission controls do I need to verify before production exposure?

Verify Kubernetes admission controls by defining and applying security baselines before production exposure, ensuring RBAC, pod security standards, and network policies are actively enforced.