K8s Security Policies

This is a comprehensive reference for locking down Kubernetes clusters with network policies, RBAC, and Pod Security Standards. It covers the three security levels (privileged, baseline, restricted), gives you ready-to-use network policy patterns like default-deny and selective ingress rules, and includes RBAC examples for both namespace and cluster-wide access. There's also OPA Gatekeeper setup and Istio service mesh security if you need admission control or mTLS. The best practices section is solid, calling out non-root containers, dropped capabilities, and read-only filesystems. It's thorough enough for compliance work (CIS, NIST) but still practical for day-to-day hardening. Worth having if you're implementing defense in depth or managing multi-tenant clusters.

skills.sh installs: 216
GitHub stars: 39.4K
last updated: Jun 3, 2026

View on GitHub

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill k8s-security-policies --agent claude-code

Installs into .claude/skills of the current project.

Files

Supporting material availability

This catalog copy contains the inline guidance below, but does not include the following supporting paths. They are external prerequisites, not bundled files:

<support-root>/assets/pod-security-template.yaml

Ask for the original supporting material or an existing installation before using a step that depends on these paths; this catalog does not identify a verified download source for them. Resolve each path relative to that installation, inspect its contents, and verify any applicable license and execution prerequisites. Do not run a command or claim a referenced procedure was followed until its required file exists. Do not fabricate the missing scripts or treat an unrelated file with the same name as equivalent. Independent steps fully documented here can proceed within the user’s authorized scope; report any dependent step as unavailable.