A tool to determine restrictive level for Kubernetes workloads
-
Updated
Jun 1, 2023 - Go
#
pod-security
Here are 25 public repositories matching this topic...
Kubernetes Pod Security Standards implemented using Kubernetes Validating Admission Policies. Support of Enforce Baseline and Restricted profiles natively with configurable policy exclusions.
kubernetes security compliance pod-security pod-security-admission validating-admission-policy kubeapt
-
Updated
Jan 26, 2026 - Shell
Kubernetes CKS practice scenarios and hands-on security labs for Certified Kubernetes Security Specialist exam prep. Free sample includes CIS hardening and control plane security scenarios. Full premium guide with advanced runtime, RBAC, Falco and zero-trust labs available.
kubernetes rbac devsecops falco cloud-security kubernetes-hardening network-policy cks kubernetes-security trivy cks-exam pod-security kubernetes-cis
-
Updated
Feb 10, 2026
Chaosify is a Kubernetes security testing CLI that proves your admission controls, RBAC policies, network segmentation, and runtime detection actually work by running targeted tests against a live cluster and producing structured evidence.
kubernetes cli rbac pentesting devsecops falco security-testing kubernetes-security kubearmor admission-control pod-security
-
Updated
Aug 28, 2026 - TypeScript
Hands-on Kubernetes Security Lab comparing insecure and hardened workloads with NetworkPolicy, Pod Security, least privilege and automated security validation.
docker kubernetes security cloud-native hardening devsecops container-security least-privilege network-policy kubernetes-security checkov pod-security
-
Updated
Sep 7, 2026 - Python
Kubernetes security posture scanner — audits manifests and live clusters for misconfigurations against CIS Benchmarks, Pod Security Standards, and the NSA/CISA hardening guide, with SARIF output and remediation guidance.
python kubernetes security k8s cloud-native sarif devsecops cis-benchmark misconfiguration pod-security
-
Updated
Sep 30, 2026 - Python
Real-time Kubernetes pod security monitoring and enforcement: dashboard, Helm, Gatekeeper, Pod Security Admission.
python kubernetes flask security real-time monitoring dashboard helm gatekeeper devsecops pod-security
-
Updated
Apr 27, 2025 - Python
Kubernetes Security Auditor — 23 CIS-based checks for RBAC, pod security, secrets, network policies, resource limits, and image security. CLI with HTML/JSON reports.
kubernetes cli security audit rbac devsecops cloud-security cis-benchmark kubernetes-security pod-security
-
Updated
Jul 22, 2026 - Python
Production-inspired Kubernetes security practices covering RBAC, Network Policies, Pod Security Standards, admission control, secrets management, runtime security, and policy enforcement.
kubernetes security containers opa rbac gatekeeper devsecops falco platform-engineering networkpolicy kyverno pod-security
-
Updated
Jul 25, 2026
Multi-environment Kubernetes platform (staging/prod) built with Kustomize and a GitHub Actions pipeline, hardened with a defense-in-depth DevSecOps setup.
kubernetes helm grafana prometheus ci-cd infrastructure-as-code observability devsecops zero-trust falco container-security runtime-security kustomize github-actions network-policy k3s kubernetes-security sealed-secrets trivy pod-security
-
Updated
Jul 1, 2026
Audit Kubernetes workload manifests against the Pod Security Standards. Flags privileged containers, host namespaces, hostPath mounts, dangerous capabilities, runAsRoot, missing seccomp, missing resource limits/probes, default ServiceAccount with token automount. Library + CLI.
-
Updated
Sep 10, 2026 - TypeScript
End-to-end DevSecOps hardening of a PCI-scoped payments microservice: workload hardening, a signing CI/CD supply chain, Istio zero-trust mTLS, and an offensive pen-test that maps findings back to the defences. All four tasks verified at runtime on a local k3d cluster.
kubernetes penetration-testing pci-dss devsecops istio zero-trust container-security mtls gitops argocd sbom sealed-secrets trivy k3d supply-chain-security semgrep kyverno cosign sigstore pod-security
-
Updated
Jul 29, 2026 - Shell
Validating/mutating admission webhook in Rust (kube-rs) - pod security, mTLS injection, policy-as-code for zero-trust K8s
-
Updated
Mar 20, 2026 - Rust
Production-grade Kubernetes security
kubernetes security helm devsecops falco gitops argocd network-policy kubernetes-security sealed-secrets trivy kyverno pod-security
-
Updated
Apr 10, 2026
Kubernetes operator for SLO enforcement, pod security guardrails, and automated namespace lifecycle management.
go kubernetes operator slo cloud-native sre platform-engineering admission-webhook controller-runtime pod-security
-
Updated
Aug 10, 2026 - Go
Kubernetes hardening baseline: tested Kyverno policies, Pod Security Admission restricted namespace, default-deny NetworkPolicy with DNS and a hardened Deployment. Audit-first, kubeconform + kyverno test in CI. MIT.
kubernetes k8s hardening security-hardening devsecops cel cis-benchmark platform-engineering networkpolicy admission-controller kustomize policy-as-code network-policy kubernetes-security kyverno cloud-native-security pod-security pod-security-admission kyverno-policies pod-security-standards
-
Updated
Sep 30, 2026 - Python
Production-grade Kubernetes security lab with 5 attack scenarios, automated detection (Trivy/Falco/Kubescape), and hands-on exploitation
kubernetes vulnerability-assessment security-automation devsecops falco container-security mitre-attack kubernetes-security trivy pod-security kubescape
-
Updated
Mar 16, 2026 - Shell
Checks Kubernetes manifests for your version: removed APIs, unknown fields, Pod Security, risks.
kubernetes yaml devops validation mcp linter developer-tools k8s ai-agents claude kubernetes-manifests pod-security model-context-protocol mcp-server deprecated-apis arhancanli-mcp
-
Updated
Oct 4, 2026 - JavaScript
Kyverno policy engine setup for a k3s cluster that is security compliant.
-
Updated
Mar 15, 2026 - Python
Secure multi-tenant Kubernetes platform with RBAC, Cilium network isolation, Pod Security, TLS, GitOps and observability.
kubernetes helm cybersecurity rbac observability network-security devsecops cloud-security gitops argocd cilium k3s pod-security
-
Updated
Aug 20, 2026 - Shell
Add this topic to your repo
To associate your repository with the pod-security topic, visit your repo's landing page and select "manage topics."