k8s-policy-hardening

Hardens a Kubernetes cluster with layered policy: Pod Security Standards on namespaces, default-deny NetworkPolicies with explicit allows, least-privilege RBAC roles and bindings, hardened pod security contexts, and optional Gatekeeper or Istio enforcement. Use when the user asks to "lock down a namespace", "write a NetworkPolicy", "set up least-privilege RBAC", "enforce pod security standards", or "secure a multi-tenant cluster". Not for runtime incident response, image vulnerability scanning, or claiming formal compliance — a manifest is not an audit.

Version

v1.0.0

Size

13 KB

Updated

2026-10-03

Your client verifies the signature before reading. This explicit manual read is available on every plan. Free automatically loads five chosen skills; paid plans automatically load relevant skills across the library.