Audit and enforce Kubernetes RBAC

Audit Kubernetes RBAC, network policies, and policy compliance across cluster

Finding which service accounts have admin access and enforcing no-wildcards policy before production.

• · RBAC role/rolebinding queries
• · network policy matchers
• · policy constraints list

• · RBAC permission matrix
• · policy violation report
• · network isolation status

• · kubectl
• · Kyverno/Gatekeeper (optional)
• · Cilium (optional)

• · Kubernetes cluster access
• · appropriate kubeconfig context

• · overly broad cluster-admin bindings not flagged
• · secrets access not audited
• · wildcard verbs not detected
• · policy reports missing

• · 10-tool suite with RBAC+policy+network focus
• · cluster-admin check as priority 1
• · threat matrix table included
• · automation script referenced