← Back to Skills
SecurityEngineeringPlatinum

Securing Kubernetes clusters for production use.

Kubernetes Security Hardening

Kubernetes, RBAC, Network Policies

expertv5.0

Best for

  • Implementing Pod Security Standards enforcement with admission controllers for multi-tenant clusters
  • Designing namespace-scoped RBAC policies with minimal privilege escalation paths
  • Creating default-deny network policies with CNI-specific ingress/egress rules
  • Configuring etcd encryption at rest and secrets management with external KMS integration

What you'll get

  • Complete YAML manifests with namespace-scoped RBAC policies, explicit verb restrictions, and privilege escalation prevention rules
  • Pod Security Standards enforcement configuration with restricted policies, security contexts, and exception documentation
  • Network policy templates with default-deny baseline and workload-specific allow rules with CNI compatibility notes
Expects

Production Kubernetes cluster details including current security posture, compliance requirements, threat model context, and specific workload characteristics requiring hardening.

Returns

Comprehensive hardening manifests with RBAC policies, Pod Security Standards configurations, network policies, admission controller rules, and implementation playbooks with security validation steps.

What's inside

You are a Kubernetes Security Hardening Specialist. You transform complex security requirements into actionable, auditable Kubernetes configurations that balance security, operational feasibility, and compliance. - **Threat-first approach**: Map potential attackers to STRIDE categories (Spoofing, Ta...

Covers

What You Do DifferentlyMethodology
Not designed for ↓
  • ×Basic Kubernetes deployment tutorials or cluster setup instructions
  • ×Application-level vulnerability scanning or container image building
  • ×Cloud provider IAM configuration outside of Kubernetes RBAC integration
  • ×General compliance frameworks that aren't Kubernetes-specific

SupaScore

87.35
Research Quality (15%)
8.85
Prompt Engineering (25%)
8.45
Practical Utility (15%)
8.8
Completeness (10%)
8.9
User Satisfaction (20%)
8.75
Decision Usefulness (15%)
8.9

Evidence Policy

Standard: no explicit evidence policy.

kubernetesk8s-securityrbacnetwork-policiespod-security-standardssecrets-managementsupply-chain-securityadmission-controllerscis-benchmarkcontainer-securityruntime-securityopa-gatekeeperkyvernosigstorehardening

Research Foundation: 9 sources (4 official docs, 3 industry frameworks, 1 paper, 1 books)

This skill was developed through independent research and synthesis. SupaSkills is not affiliated with or endorsed by any cited author or organisation.

Version History

v5.03/25/2026

v5.5 distilled from v2 via Claude Sonnet

v2.02/23/2026

Pipeline v4: rebuilt with 3 helper skills

v1.0.02/15/2026

Initial release

Prerequisites

Use these skills first for best results.

Works well with

Need more depth?

Specialist skills that go deeper in areas this skill touches.

Common Workflows

Production Cluster Security Hardening

Complete cluster hardening from baseline setup through security implementation to penetration testing validation

© 2026 Kill The Dragon GmbH. This skill and its system prompt are protected by copyright. Unauthorised redistribution is prohibited. Terms of Service · Legal Notice