skills.rest
ivanshamaev
ivanshamaevCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

infra-kubernetes-security-audit

Audit Kubernetes RBAC, Pod Security Standards, NetworkPolicy, and secret/image protections.

14|1|Updated May 5, 2026
Search Tags:#secret management#security audit#rbac#kubernetes#networkpolicy#image scanning#pod security standards
One-click install
npx skills add https://github.com/ivanshamaev/de-agent-skills --skill infra-kubernetes-security-audit
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: infra-kubernetes-security-audit
Source: https://github.com/ivanshamaev/de-agent-skills/tree/main/group_skills/infra_dataops_group_skills/infra_kubernetes_security_audit
Command: npx skills add https://github.com/ivanshamaev/de-agent-skills --skill infra-kubernetes-security-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps you identify Kubernetes security weaknesses by systematically auditing RBAC, Pod Security Standards, NetworkPolicy coverage, and secret/image/supply-chain protections before incidents happen.

Core Features & Use Cases

  • RBAC Review: Detect overly permissive ClusterRoleBindings/RoleBindings and verify service accounts follow least-privilege principles.
  • Pod Security & Misconfiguration Checks: Validate Pod Security Admission settings and spot privileged or root-running workloads.
  • Defense-in-Depth Controls: Assess NetworkPolicy defaults, secret handling (external secrets + encryption at rest), image vulnerability scanning, admission controller enforcement, and audit logging against CIS expectations.
  • Use Case: Before onboarding a new team or service, run an audit to confirm that the namespace enforces restricted policies, the service account cannot overreach, the network is default-deny, and secrets/images meet security requirements.

Quick Start

Ask an AI to produce an audit plan and actionable kubectl/manifest checks for a Kubernetes cluster targeting namespace RBAC, Pod Security Standard enforcement, NetworkPolicy posture, and secret/image scanning.

Frequently Asked Questions about infra-kubernetes-security-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Kubernetes RBAC permissions for overly permissive service accounts?▼

Audit Kubernetes RBAC permissions by reviewing ClusterRoleBindings and RoleBindings to detect overly permissive access. Verify service accounts follow least-privilege principles to validate enforcement before onboarding new services or teams.

What is the best way to check Pod Security Standards enforcement in a Kubernetes namespace?▼

Check Pod Security Standards enforcement by validating Pod Security Admission settings to spot privileged or root-running workloads. Confirm target namespaces enforce restricted policies to prevent pod misconfigurations before new service onboarding.

How do I validate NetworkPolicy default-deny posture and secret encryption in Kubernetes?▼

Validate NetworkPolicy default-deny posture and secret encryption by assessing defense-in-depth controls. Check NetworkPolicy defaults, external secret handling, and encryption at rest to ensure cluster network and secret security meets CIS expectations.

Can I use kubectl to perform a pre-production Kubernetes security audit for supply-chain vulnerabilities?▼

Use kubectl to perform a pre-production Kubernetes security audit by executing introspection queries. Validate image vulnerability scanning, admission controller enforcement, and audit logging rules to verify supply-chain protections against CIS expectations.

Does this security audit cover incident investigation triage for Kubernetes clusters?▼

This Kubernetes security audit covers incident investigation triage. It applies to ongoing hardening by validating enforcement via admission controls, secret encryption checks, vulnerability scanning, and audit logging rules during triage.

Related Skills

Explore More Legal & Compliance Skills→
AngelP17AngelP17
1

k8s-security-policies

Implement Kubernetes NetworkPolicy, PodSecurityPolicy, and RBAC security controls.

Community
Advanced
rbaumierrbaumier
4

kubernetes

Review and harden Kubernetes manifests for secure, resilient deployments.

Community
Advanced
rajeevramanirajeevramani
1

flowplane-secrets

Manage encrypted secrets for Flowplane's Envoy gateway via SDS.

Community
Advanced
zzw4257zzw4257

kube-bench

Audit Kubernetes clusters against the CIS Kubernetes Benchmark.

Community
Intermediate