k8s-security-policies

Comprehensive guide for implementing NetworkPolicy, PodSecurityPolicy, RBAC, and Pod Security Standards in Kubernetes. Implement defense-in-depth security for Kubernetes clusters using network policies, pod security standards, and RBAC. Reference: See assets/network-policy-template.yaml Reference: See references/rbac-patterns.md NetworkPolicy not working: RBAC permission denied: - Implement network segmentation - Configure pod security standards - Set up RBAC for least-privilege access - Create security policies for compliance - Implement admission control - Secure multi-tenant clusters - Implement Pod Security Standards at namespace level - Use Network Policies for network segmentation - Apply least-privilege RBAC for all service accounts - Enable admission control (OPA Gatekeeper/Kyverno) - Run containers as non-root - Use read-only root filesystem - Drop all capabilities unless needed - Implement resource quotas and limit ranges - Enable audit logging for security events - Regular security scanning of images - Use RBAC authorization - Enable audit logging - Use Pod Security Standards - Configure network policies - Implement secrets encryption at rest - Enable node authentication - Implement defense in depth - Use network segmentation - Configure security monitoring - Implement access controls - Enable logging and monitoring - k8s-manifest-generator - For creating secure...