Stats
Links
Categories
Marketplace
k8s-rbac-companion
Claude Code plugin that reads your workload's code and generates a least-privilege Kubernetes RBAC manifest — a Role/ClusterRole plus matching binding, scoped to the exact API groups, resources, and verbs the workload uses, annotated, and optionally validated against a live cluster.
$
npx claudepluginhub mjtrapani/k8s-rbac-companion1 Plugin
k8s-rbac-companion
1·
Generates a least-privilege Kubernetes RBAC manifest — a Role/ClusterRole plus a matching binding — scoped to exactly the API groups, resources, and verbs your workload actually uses. For platform and app engineers locking down a workload's ServiceAccount: reads the code, infers the API access patterns, emits annotated YAML.
3w
mjtrapani