bagelhole/devops-security-agent-skills324 installs

kubernetes-hardening

Q: How do I install this agent skill?

Run npx skills add https://github.com/bagelhole/devops-security-agent-skills --skill kubernetes-hardening.

Q: Is this agent skill safe to install?

Review the displayed partner audits, complete source, permissions, dependencies, and exact revision before installing.

Implement Kubernetes security contexts, Pod Security Standards, and network policies. Secure cluster components and workloads. Use when hardening Kubernetes deployments or meeting security compliance.

How do I install this agent skill?

npx skills add https://github.com/bagelhole/devops-security-agent-skills --skill kubernetes-hardening

view source ↗

Is this agent skill safe to install?

Gen Agent Trust Hubpass
This skill provides standard configuration templates and best practices for hardening Kubernetes environments, including Pod Security Standards, Security Contexts, Network Policies, and Role-Based Access Control (RBAC).
Socketpass
No alerts
Snykpass
Risk: LOW · No issues
Runlayerpass
1/1 file flagged
ZeroLeakspass
Score: 93/100 · 2 sections analyzed

What does this agent skill do?

Kubernetes Hardening

Secure Kubernetes clusters and workloads.

When to Use This Skill

Use this skill when:

Hardening Kubernetes clusters
Implementing Pod Security Standards
Configuring network policies
Meeting security compliance

Pod Security Standards

# Namespace with restricted policy
apiVersion: v1
kind: Namespace
metadata:
  name: production
  labels:
    pod-security.kubernetes.io/enforce: restricted
    pod-security.kubernetes.io/audit: restricted
    pod-security.kubernetes.io/warn: restricted

Security Context

apiVersion: v1
kind: Pod
metadata:
  name: secure-pod
spec:
  securityContext:
    runAsNonRoot: true
    runAsUser: 1000
    runAsGroup: 1000
    fsGroup: 1000
    seccompProfile:
      type: RuntimeDefault
  containers:
  - name: app
    image: myapp:latest
    securityContext:
      allowPrivilegeEscalation: false
      readOnlyRootFilesystem: true
      capabilities:
        drop: ["ALL"]

Network Policies

apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: default-deny-all
spec:
  podSelector: {}
  policyTypes:
  - Ingress
  - Egress
---
apiVersion: networking.k8s.io/v1
kind: NetworkPolicy
metadata:
  name: allow-web
spec:
  podSelector:
    matchLabels:
      app: web
  ingress:
  - from:
    - podSelector:
        matchLabels:
          app: frontend
    ports:
    - port: 8080

RBAC

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: app-reader
rules:
- apiGroups: [""]
  resources: ["pods", "services"]
  verbs: ["get", "list"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: app-reader-binding
subjects:
- kind: ServiceAccount
  name: myapp
roleRef:
  kind: Role
  name: app-reader
  apiGroup: rbac.authorization.k8s.io

Best Practices

Enable Pod Security Standards
Implement network policies
Use RBAC with least privilege
Enable audit logging
Secure etcd with encryption
Use service mesh for mTLS
Regular security scanning

Related Skills

kubernetes-ops - K8s operations
container-hardening - Container security

How can the creator link this skill?

Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.

<a href="https://skillzs.dev/skills/bagelhole/devops-security-agent-skills/kubernetes-hardening">View kubernetes-hardening on skillZs</a>