liggitt/audit2rbac

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1112 stars · 83 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

audit2rbac is a Go CLI tool that takes a Kubernetes audit log and a username as input and generates RBAC Role and RoleBinding objects covering all API requests made by that user. It automates least-privilege RBAC policy authoring from observed API activity.

Use cases

• generate kubernetes rbac roles from audit logs
• create least-privilege role bindings for a service account
• figure out what permissions a user actually needs
• autogenerate rbac yaml instead of guessing permissions
• audit what api calls an app makes and scope its access
• convert broad cluster-admin access into minimal rbac rules

When to choose

• you have kubernetes audit logs in JSON format and want to derive exact RBAC policies for a user or service account
• you want to replace overly broad permissions with least-privilege roles based on observed behavior
• you run Kubernetes or OpenShift and need to author Role/RoleBinding manifests quickly

When to avoid

• you need RBAC policy management or continuous enforcement rather than one-time generation
• you don't have audit logging enabled or can't capture the full set of API requests
• you need authorization mechanisms other than Kubernetes RBAC

Facets

cli-tool · maturity maintenance

authorization security cli developer-tools security developer-tools cli windows cross-platform kubernetes rbac audit-logs openshift policy-generation go devops linux macos

Member repositories

For agents

markdown · JSON · MCP: product_card(name="liggitt/audit2rbac")