rbac-tool
rbac-tool copied to clipboard
Analysis/Audit rule listing bindings for non-existant accounts
What would you like to be added: I'd like `rbac-tool analyze' warn about (Cluster)Rolebindings for accounts that don't or no longer exist in the cluster.
Why is this needed: Unnecessary permissions are a security risk and should be audited.