k8s-security-policies

Defense-in-depth Kubernetes security through network policies, pod security standards, RBAC, and admission control. Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes. Implement defense-in-depth security for Kubernetes clusters using network policies, pod security standards, and RBAC. Reference: See assets/network-policy-template.yaml Reference: See references/rbac-patterns.md NetworkPolicy not working: RBAC permission denied: - Covers three pod security levels (Privileged, Baseline, Restricted) enforced via namespace labels for graduated security posture - Provides NetworkPolicy templates for default-deny, service-to-service communication, and DNS egress patterns - Includes RBAC configuration examples for roles, cluster roles, and bindings to implement least-privilege access - Demonstrates OPA Gatekeeper constraint templates and Istio mTLS/AuthorizationPolicy for policy enforcement and service mesh security - References CIS Kubernetes Benchmark and NIST Cybersecurity Framework compliance patterns with troubleshooting commands for NetworkPolicy and RBAC validation - Implement network segmentation - Configure pod security standards - Set up RBAC for least-privilege access - Create security policies for compliance - Implement admission control - Secure multi-tenant clusters - Implement Pod Security Standards at...