Rapid7 | insightCloudSec | Kubernetes RBAC Power Toys - Visualize, Analyze, Generate & Query

Show who has RBAC permissions to perform actions on different resources in Kubernetes

Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego

Automatically sync groups into Kubernetes RBAC

A unified IAM+Kubernetes RBAC access control exploration tool

Login portal for Kubernetes using Active Directory. Provides authentication and SSO for kubectl and for the dashboard.

Kubernetes login portal for both kubectl and the dashboard using OpenID Connect. Use groups from your assertion in RBAC policies to control access to your cluster. Supports impersonation and OpenID Connect integration with your API server.

Kubernetes login portal for both kubectl and the dashboard using GitHub. Use organizations and teams in RBAC policies to control access to your cluster. Supports impersonation and OpenID Connect integration with your API server.

The argocd-operator-extension is an operator extension for the Argo CD Operator in order to automate the handling of the Kubernetes RBAC (i.e. service accounts, roles, role bindings) for multiple (restricted) Argo CD instances in a shared cluster.

Kubernetes login portal for both kubectl and the dashboard using SAML2. Use groups from your assertion in RBAC policies to control access to your cluster. Supports impersonation and OpenID Connect integration with your API server.

Setup needed components on a digitalocean cluster, after downloading the admin kube config.

🚀 Experiments with Kubernetes RBAC/ABAC (Flask+Mongo)