Agent skill · security · aiskillstore
k8s-security-policies
Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.
Why this skill is useful
Adds executable YAML configurations for Kubernetes security policies that provide specific implementations not commonly found in public documentation.
What it needs
About 3k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Kubernetes Security Policies Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes. Do not use this skill when The task is unrelated to kubernetes security policies You need a different domain or tool outside this scope Instructions Clarify goals, constraints, and required inputs. Apply relevant best practices and validate outcomes. Provide actionable steps and verification. If detailed examples are required, open resources/implementation-playbook.md. Purpose Implement defense-in-depth security for Kubernetes clusters using network policies, pod security standards, and RBAC. Use this skill when Implement network segmentation Configure pod security standards Set up RBAC for least-privilege access Create security policies for compliance Implement admission control Secure multi-tenant clusters Pod Security Standards 1. Privileged (Unrestricted) 2. Baseline (Minimally restrictive) 3. Restricted (Most restrictive) Network Policies Default Deny All Allow Frontend to Backend Allow DNS Reference: See assets/network-policy-template.yaml RBAC Configuration Role (Namespace-scoped) ClusterRole (Cluster-wide) RoleBinding Reference: See references/rbac-patterns.md Pod Security Context Restricted Pod Policy Enforcement with OPA Gatekeeper ConstraintTemplate Constraint Service Mesh Security (Istio) PeerAuthentication (mTLS) AuthorizationPolicy Best Practices 1. Implement Pod Security Standards at namespace level 2. Use Network Policies for network segmentation 3. Apply least-privilege RBAC for all service accounts 4. Enable admission control (OPA Gatekeeper/Kyverno) 5. Run containers as non-root 6. Use read-only root filesystem 7. Drop all capabilities unless needed 8. Implement resource quotas and limit ranges 9. Enable audit logging for security events 10. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/k8s-security-policies