A tool to determine restrictive level for Kubernetes workloads
-
Updated
Jun 1, 2023 - Go
#
pod-security
Here are 21 public repositories matching this topic...
Kubernetes Pod Security Standards implemented using Kubernetes Validating Admission Policies. Support of Enforce Baseline and Restricted profiles natively with configurable policy exclusions.
kubernetes security compliance pod-security pod-security-admission validating-admission-policy kubeapt
-
Updated
Jan 26, 2026 - Shell
Kubernetes CKS practice scenarios and hands-on security labs for Certified Kubernetes Security Specialist exam prep. Free sample includes CIS hardening and control plane security scenarios. Full premium guide with advanced runtime, RBAC, Falco and zero-trust labs available.
kubernetes rbac devsecops falco cloud-security kubernetes-hardening network-policy cks kubernetes-security trivy cks-exam pod-security kubernetes-cis
-
Updated
Feb 10, 2026
12 hands-on CKS labs covering API server hardening, audit logs, NetworkPolicy, ingress security, RBAC, service accounts, Pod Security, admission control, node and kubelet hardening, seccomp, AppArmor, secure pod design, secrets, image scanning, SBOMs, signing, manifest analysis, Falco, runtime security, and timed readiness.
kubernetes security cncf rbac kubectl courseware seccomp apparmor kubelet falco linux-foundation runtime-security networkpolicy kube-bench sbom cks trivy cosign admission-control pod-security
-
Updated
Jul 7, 2026
Chaosify is a Kubernetes security testing CLI that proves your admission controls, RBAC policies, network segmentation, and runtime detection actually work by running targeted tests against a live cluster and producing structured evidence.
kubernetes cli rbac pentesting devsecops falco security-testing kubernetes-security kubearmor admission-control pod-security
-
Updated
Aug 1, 2026 - TypeScript
Kubernetes security posture scanner — audits manifests and live clusters for misconfigurations against CIS Benchmarks, Pod Security Standards, and the NSA/CISA hardening guide, with SARIF output and remediation guidance.
python kubernetes security k8s cloud-native sarif devsecops cis-benchmark misconfiguration pod-security
-
Updated
Aug 1, 2026 - Python
Real-time Kubernetes pod security monitoring and enforcement: dashboard, Helm, Gatekeeper, Pod Security Admission.
python kubernetes flask security real-time monitoring dashboard helm gatekeeper devsecops pod-security
-
Updated
Apr 27, 2025 - Python
Multi-environment Kubernetes platform (staging/prod) built with Kustomize and a GitHub Actions pipeline, hardened with a defense-in-depth DevSecOps setup.
kubernetes helm grafana prometheus ci-cd infrastructure-as-code observability devsecops zero-trust falco container-security runtime-security kustomize github-actions network-policy k3s kubernetes-security sealed-secrets trivy pod-security
-
Updated
Jul 1, 2026
Kubernetes Security Auditor — 23 CIS-based checks for RBAC, pod security, secrets, network policies, resource limits, and image security. CLI with HTML/JSON reports.
kubernetes cli security audit rbac devsecops cloud-security cis-benchmark kubernetes-security pod-security
-
Updated
Jul 22, 2026 - Python
Production-grade Kubernetes security lab with 5 attack scenarios, automated detection (Trivy/Falco/Kubescape), and hands-on exploitation
kubernetes vulnerability-assessment security-automation devsecops falco container-security mitre-attack kubernetes-security trivy pod-security kubescape
-
Updated
Mar 16, 2026 - Shell
Production-inspired Kubernetes security practices covering RBAC, Network Policies, Pod Security Standards, admission control, secrets management, runtime security, and policy enforcement.
kubernetes security containers opa rbac gatekeeper devsecops falco platform-engineering networkpolicy kyverno pod-security
-
Updated
Jul 25, 2026
End-to-end DevSecOps hardening of a PCI-scoped payments microservice: workload hardening, a signing CI/CD supply chain, Istio zero-trust mTLS, and an offensive pen-test that maps findings back to the defences. All four tasks verified at runtime on a local k3d cluster.
kubernetes penetration-testing pci-dss devsecops istio zero-trust container-security mtls gitops argocd sbom sealed-secrets trivy k3d supply-chain-security semgrep kyverno cosign sigstore pod-security
-
Updated
Jul 29, 2026 - Shell
Audit Kubernetes workload manifests against the Pod Security Standards. Flags privileged containers, host namespaces, hostPath mounts, dangerous capabilities, runAsRoot, missing seccomp, missing resource limits/probes, default ServiceAccount with token automount. Library + CLI.
-
Updated
Aug 11, 2026 - TypeScript
Secure multi-tenant Kubernetes platform with RBAC, Cilium network isolation, Pod Security, TLS, GitOps and observability.
kubernetes helm cybersecurity rbac observability network-security devsecops cloud-security gitops argocd cilium k3s pod-security
-
Updated
Aug 20, 2026 - Shell
Validating/mutating admission webhook in Rust (kube-rs) - pod security, mTLS injection, policy-as-code for zero-trust K8s
-
Updated
Mar 20, 2026 - Rust
Production-grade Kubernetes security
kubernetes security helm devsecops falco gitops argocd network-policy kubernetes-security sealed-secrets trivy kyverno pod-security
-
Updated
Apr 10, 2026
Kubernetes operator for SLO enforcement, pod security guardrails, and automated namespace lifecycle management.
go kubernetes operator slo cloud-native sre platform-engineering admission-webhook controller-runtime pod-security
-
Updated
Aug 10, 2026 - Go
Kyverno policy engine setup for a k3s cluster that is security compliant.
-
Updated
Mar 15, 2026 - Python
Kubernetes reference for sandboxed automated agent workloads with egress controls, Vault integration patterns, and PII redaction.
python kubernetes security containers ci-cd infrastructure-as-code hashicorp-vault devsecops pii secrets-management kustomize github-actions network-policy batch-jobs agent-sandbox pod-security
-
Updated
Apr 23, 2026 - Python
Shell-based Kubernetes security audits for RBAC and workload posture (PSA, capabilities, cloud identity). Vanilla, EKS, GKE, AKS & OpenShift. Optional Terraform lab stacks.
-
Updated
Aug 16, 2026 - Shell
Improve this page
Add a description, image, and links to the pod-security topic page so that developers can more easily learn about it.
Add this topic to your repo
To associate your repository with the pod-security topic, visit your repo's landing page and select "manage topics."