corneliusweig/rakkess

Health v2 · maintenance only

Adoption not part of the score

1401 stars · 60 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

rakkess is a kubectl plugin that displays an access matrix showing the current user's permissions across all Kubernetes server resources, similar to an extended `kubectl auth can-i --list`. It can also reverse the query to list which subjects (users, groups, service accounts) have access to a given resource.

Use cases

• show all my permissions on a kubernetes cluster
• check which users can access a configmap
• audit rbac access matrix for k8s resources
• find who can delete deployments in a namespace
• verify service account permissions in kubernetes

When to choose

• you need a complete overview of RBAC permissions rather than single `kubectl auth can-i` checks
• you want to find all subjects with access to a specific resource
• you need to audit name-restricted roles

When to avoid

• you only need a simple single-resource permission check (use `kubectl auth can-i`)
• you need continuous RBAC compliance auditing or policy enforcement rather than ad-hoc inspection

Facets

cli-tool · maturity maintenance

authorization cli security developer-tools security cli go cross-platform kubectl-plugin rbac kubernetes access-matrix k8s devops

Member repositories

For agents

markdown · JSON · MCP: product_card(name="corneliusweig/rakkess")