Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Kubernetes Security Policies
Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes.
## Purpose
Implement defense-in-depth security for Kubernetes clusters using network policies, pod security standards, and RBAC.
## When to Use This Skill
- Implement network segmentation
- Configure pod security standards
- Set up RBAC for least-privilege access
- Create security policies for compliance
- Implement admission control
- Secure multi-tenant clusters
## Pod Security Standards
### 1. Privileged (Unrestricted)
```yaml
apiVersion: v1
kind: Namespace
metadata:
name: privileged-ns
labels:
pod-security.kubernetes.io/enforce: privileged
pod-security.kubernetes.io/audit: privileged
pod-security.kubernetes.io/warn: privileged
```
### 2. Baseline (Minimally restrictive)
```yaml
apiVersion: v1
kind: Namespace
metadata:
name: baseline-ns
labels:
pod-security.kubernetes.io/enforce: baseline
pod-security.kubernetes.io/audit: baseline
pod-security.kubernetes.io/warn: baseline
```
### 3. Restricted (Most restrictive)
```yaml
apiVersion: v1
kind: Namespace
metadata:
name: restricted-ns
…
The line at the top of this page pins the label git:20251120.50bf83d, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
GET https://markdownregistry.com/api/v1/artifacts/art_2o26ll54dshd74ig
GET https://markdownregistry.com/api/v1/resolve?ref=hermeticormus/claude-code-game-development/k8s-security-policies
GET https://markdownregistry.com/api/v1/blob/a2c3f21b667b15c8716d7d883b75729959635868a8bde2e5477bd9248372ab79
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
hermeticormus/claude-code-game-development · .grok/skills/verify-claude-code-game-development/SKILL.md · Install the claude-code-game-development plugin pack the way a user does, into a clean Claude Code config and a clean…
hermeticormus/claude-code-game-development · plugins/audio-systems/skills/audio-patterns/SKILL.md · Game audio code patterns: a Godot bus layout, an audio player pool, randomized one-shot playback, vertical-remix…
hermeticormus/claude-code-game-development · plugins/backend-development/skills/api-design-principles/SKILL.md · Master REST and GraphQL API design principles to build intuitive, scalable, and maintainable APIs that delight…
hermeticormus/claude-code-game-development · plugins/backend-development/skills/temporal-python-testing/SKILL.md · Test Temporal workflows with pytest, time-skipping, and mocking strategies. Covers unit testing, integration testing…
hermeticormus/claude-code-game-development · plugins/blockchain-web3/skills/defi-protocol-templates/SKILL.md · Implement DeFi protocols with production-ready templates for staking, AMMs, governance, and lending systems. Use when…
wshobson/agents · plugins/kubernetes-operations/skills/k8s-security-policies/SKILL.md · Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade…
dicklesworthstone/pi_agent_rust · tests/ext_conformance/artifacts/agents-wshobson/kubernetes-operations/skills/k8s-security-policies/SKILL.md · Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade…
sandbaseai/sandbase-skills · marketing/k8s-security-policies/SKILL.md · Plan, implement, or review kubernetes security policies work in an existing codebase with compatibility, security, and…
hermeticormus/libreuiux-claude-code · plugins/kubernetes-operations/skills/k8s-security-policies/SKILL.md · Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade…
rudycity/superagent · .agents/skills/k8s-security-policies/SKILL.md · Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade…
hermeticormus/libresecops-claude-code · plugins/kubernetes-security/skills/k8s-security-policies/SKILL.md · Pod Security Standards and Pod Security Admission, NetworkPolicy fundamentals with default-deny and service-to-service…