# FairwindsOps/rbac-manager

A Kubernetes operator that simplifies the management of Role Bindings and Service Accounts.

Repository: https://github.com/FairwindsOps/rbac-manager
Canonical: https://ross.abutalabs.com/products/rbac-manager
Homepage: https://fairwinds.com
Language: Go
License: Apache-2.0
License Family: permissive
Topics: kubernetes, rbac, authorization, crd, cluster, fairwinds-official
Last push: 2026-08-16T07:48:20+00:00

## Health v2 (maintenance only)
Score: 94/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 98, release rhythm 85, longevity 100
- inputs: {"age_days": 3095, "days_push": 17, "days_rel": 23, "gap_med": 52.0, "n_releases_24m": 7}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1665, forks 134 (observed 2026-08-28T04:05:19.076094+00:00)

## What it is
RBAC Manager is a Kubernetes operator that simplifies authorization management by allowing declarative configuration of Role Bindings and Service Accounts through custom resources. Instead of managing RBAC objects directly, users specify desired state and the operator reconciles the cluster to match it.

## Use cases
- manage kubernetes role bindings declaratively
- automate rbac configuration across clusters
- simplify service account management in kubernetes
- onboard teams to kubernetes with gitops-friendly rbac
- replace manual kubectl rolebinding commands
- manage cluster authorization via custom resources

## When to choose
- you manage many role bindings and service accounts across teams or namespaces
- you want declarative, GitOps-style RBAC configuration
- you want an operator to reconcile RBAC desired state automatically

## When to avoid
- you have only a handful of RBAC objects and simple needs
- you don't run Kubernetes or can't deploy operators
- you need fine-grained policy enforcement beyond role bindings (use OPA/Kyverno instead)

## Facets
- artifact type: service
- maturity: active
- function: authorization, security, configuration-management
- domain: security, infrastructure-as-code
- platform: go, self-hosted
- tags: kubernetes-operator, rbac, crd, role-bindings, service-accounts, declarative-config, fairwinds, kubernetes, devops, docker

## Member repositories
- FairwindsOps/rbac-manager (main) score 94

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:19.076094+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:43:00.656565+00:00, confidence not recorded.
  - readme: https://github.com/FairwindsOps/rbac-manager (fetched 2026-08-28T04:05:19.076094+00:00, sha bb57959c4477)
  - homepage: https://fairwinds.com (fetched 2026-08-29T11:16:26.669563+00:00, sha 92e848fcc5ec)
  - site_page: https://www.fairwinds.com/insights-features (fetched 2026-08-29T11:16:26.678081+00:00, sha b96d47f953f8)
  - site_page: https://insights.docs.fairwinds.com/ (fetched 2026-08-29T11:16:26.679984+00:00, sha 0563b916b4ac)
  - site_page: https://www.fairwinds.com/gke-quickstart (fetched 2026-08-29T11:16:26.681605+00:00, sha 01174bc9b9d6)
  - site_page: https://www.fairwinds.com/aks-quickstart (fetched 2026-08-29T11:16:26.683165+00:00, sha 3929a4106941)
- Data as of 2026-08-30T08:39:29.467469+00:00.