k8s-security-policies SKILL.md skillA

This file is byte-identical to the first copy the registry indexed. Same content hash, so the same checks give both the same grade.

k8s-security-policies from hermeticormus/libreuiux-claude-code is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

mdr add hermeticormus/libreuiux-claude-code/k8s-security-policies@git:20251120.288a379

Pins git:20251120.288a379 in mdr.lock. Pin the fingerprint instead.

Audit grade

A, 17 of 17 checks passed

Kind

SKILL.md skill

Repository

hermeticormus/libreuiux-claude-code

Path

plugins/kubernetes-operations/skills/k8s-security-policies/SKILL.md

Versions recorded

1

Latest version

git:20251120.288a379, committed Nov 20, 2025

Size

7,276 bytes

Repository stars

118

License

MIT

Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Kubernetes Security Policies

Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes.

## Purpose

Implement defense-in-depth security for Kubernetes clusters using network policies, pod security standards, and RBAC.

## When to Use This Skill

- Implement network segmentation
- Configure pod security standards
- Set up RBAC for least-privilege access
- Create security policies for compliance
- Implement admission control
- Secure multi-tenant clusters

## Pod Security Standards

### 1. Privileged (Unrestricted)
```yaml
apiVersion: v1
kind: Namespace
metadata:
  name: privileged-ns
  labels:
    pod-security.kubernetes.io/enforce: privileged
    pod-security.kubernetes.io/audit: privileged
    pod-security.kubernetes.io/warn: privileged
```

### 2. Baseline (Minimally restrictive)
```yaml
apiVersion: v1
kind: Namespace
metadata:
  name: baseline-ns
  labels:
    pod-security.kubernetes.io/enforce: baseline
    pod-security.kubernetes.io/audit: baseline
    pod-security.kubernetes.io/warn: baseline
```

### 3. Restricted (Most restrictive)
```yaml
apiVersion: v1
kind: Namespace
metadata:
  name: restricted-ns
…

Read the whole file at its exact version.

How to install

mdr add hermeticormus/libreuiux-claude-code/k8s-security-policies@sha256:a2c3f21b667b15c8

[![mdr](https://markdownregistry.com/badge/art_ulze5lijs7olz3m7.svg)](https://markdownregistry.com/a/art_ulze5lijs7olz3m7)

Versions

The registry has recorded 1 version of this file, committed on Nov 20, 2025.

Audit of the latest version

Source

API

GET https://markdownregistry.com/api/v1/artifacts/art_ulze5lijs7olz3m7
GET https://markdownregistry.com/api/v1/resolve?ref=hermeticormus/libreuiux-claude-code/k8s-security-policies
GET https://markdownregistry.com/api/v1/blob/a2c3f21b667b15c8716d7d883b75729959635868a8bde2e5477bd9248372ab79

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

More from hermeticormus/libreuiux-claude-code

Every file in hermeticormus/libreuiux-claude-code

Other files named k8s-security-policies

Browse by kind, by grade A, or by owner.