Audicia – Generate least-privilege Kubernetes RBAC from audit log

Show HN: Audicia – Generate least-privilege Kubernetes RBAC from audit log

Audicia – Generate least-privilege Kubernetes RBAC from audit log is active in the show hn launch space.

Profile

I built an open-source Kubernetes operator that watches audit logs and generates scoped Role/ClusterRole manifests based on what ServiceAccounts actually access.The problem: most clusters run with overly permissive RBAC because getting it right manually is tedious.You end up with cluster-admin bindings everywhere or spend hours crafting policies by hand.Audicia flips it — ingest audit logs (file or webhook), normalize the access patterns, and output least-privilege RBAC.It also diffs observed vs. granted permissions to produce a compliance score.Everything runs as a controller in your cluster via CRDs. No SaaS, no external dependencies.GitHub: github.com/felixnotka/audicia Website: audicia.i

Its activity falls under show hn launch; the profile below is assembled from public directory data.

Directory data places it at the Show HN launch stage.

Website: audicia.io