Results for “pod-security”
15 skills
mukul975 Implementing Kubernetes Pod Security Standards
Enforce Pod Security Standards (Privileged, Baseline, Restricted) in Kubernetes 1.25+ using the Pod Security Admission controller with namespace labels and compliant pod specs.
24.6k · bundle
mukul975 Implementing Pod Security Admission Controller
Enforce Kubernetes Pod Security Standards at the namespace level using the built-in admission controller, with support for baseline and restricted profiles.
24.6k · bundle
mukul975 Detecting Privilege Escalation In Kubernetes Pods
Detect and prevent privilege escalation in Kubernetes pods by monitoring security contexts, capabilities, and syscall patterns with Falco and OPA policies.
24.6k · bundle
google Gke Security
Hardens Google Kubernetes Engine (GKE) clusters with Workload Identity, Secret Manager, RBAC, Binary Authorization, Network Policies, and Pod Security Standards.
14.4k · bundle
More results
mukul975 Securing Kubernetes On Cloud
Hardens managed Kubernetes clusters on EKS, AKS, and GKE by implementing Pod Security Standards, network policies, workload identity, RBAC scoping, image admission controls, and runtime security monitoring.
24.6k · bundle
mukul975 Performing Container Escape Detection
Audits Kubernetes pods for container escape vectors by analyzing privileged mode, dangerous capabilities, host namespace sharing, and writable hostPath mounts using the Kubernetes Python client.
24.6k · bundle
mukul975 Implementing Container Network Policies With Calico
Enforce Kubernetes network segmentation using Calico CNI network policies and global network policies to control pod-to-pod traffic, restrict egress, and implement zero-trust microsegmentation.
24.6k · bundle
pwdev-solucoes Kubernetes Platform
Diagnoses and operates Kubernetes clusters: pods, deployments, ingress, HPA, PVC, StorageClass, NetworkPolicy, Secrets, Helm, ArgoCD, cert-manager. Reads before changing; mutations require confirmation and diff review.
2
oracle Oke Multihome Deployer
Deploy and verify Multus-based pod multihoming on OKE clusters with existing GVA secondary VNIC node pools, including discovery, manifest generation, and connectivity validation.
736 · bundle
google Gke Reliability
Configures GKE workload reliability with PodDisruptionBudgets, health probes, topology spread constraints, and graceful shutdown patterns.
14.4k
mukul975 Implementing Network Policies For Kubernetes
Create and apply Kubernetes NetworkPolicies to enforce pod-level network segmentation, restrict traffic between pods and namespaces, and block access to cloud metadata endpoints.
24.6k · bundle
mukul975 Escaping Containers To Host
Exploit privileged pods, host mounts, runC CVEs, and exposed Docker sockets to break out of a container and reach the underlying host during authorized container-security assessments.
24.6k · bundle
mukul975 Implementing Kubernetes Network Policy With Calico
Implement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod communication.
24.6k · bundle
mukul975 Detecting Container Drift At Runtime
Detect unauthorized modifications to running containers by monitoring for binary execution drift, file system changes, and configuration deviations from the original container image.
24.6k · bundle
mukul975 Performing Kubernetes Penetration Testing
Systematically evaluates Kubernetes cluster security by simulating attacker techniques against the API server, kubelet, etcd, pods, RBAC, network policies, and secrets using tools like kube-hunter, Kubescape, and kube-bench.
24.6k · bundle