Claude Code plugin that reads your workload's code and generates a least-privilege Kubernetes RBAC manifest — a Role/ClusterRole plus matching binding, scoped to the exact API groups, resources, and verbs the workload uses, annotated, and optionally validated against a live cluster.
npx claudepluginhub mjtrapani/k8s-rbac-companionGenerates a least-privilege Kubernetes RBAC manifest — a Role/ClusterRole plus a matching binding — scoped to exactly the API groups, resources, and verbs your workload actually uses. For platform and app engineers locking down a workload's ServiceAccount: reads the code, infers the API access patterns, emits annotated YAML.