alcideio/rbac-tool

Health v2 · maintenance only

Adoption not part of the score

1083 stars · 72 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A kubectl plugin and standalone CLI that simplifies Kubernetes RBAC by visualizing, analyzing, generating, and querying RBAC policies. It helps identify overly permissive principals, generate least-privilege roles from audit events, and answer 'who can' questions about cluster permissions.

Use cases

• analyze kubernetes rbac permissions for overly permissive roles
• find out who can access a kubernetes resource
• generate least-privilege role yaml without wildcards
• generate rbac policies from kubernetes audit logs
• list all policy rules for a service account
• lookup rbac permissions by user or group name
• audit kubernetes cluster access control

When to choose

• you manage kubernetes RBAC and need to audit or reduce permissions
• you want a kubectl plugin to answer who-can-do-what questions
• you need to generate minimal Role/ClusterRole definitions from audit events

When to avoid

• you need RBAC management for non-Kubernetes systems
• you want a GUI dashboard for cluster-wide security posture rather than a CLI tool

Facets

cli-tool · maturity active

authorization security cli security developer-tools cli cross-platform go kubernetes rbac kubectl-plugin krew least-privilege access-control policy-generation rbac-analysis containers

Member repositories

For agents

markdown · JSON · MCP: product_card(name="alcideio/rbac-tool")