Developer Builds Kubernetes RBAC Security CLI Tool While Learning Go From Scratch

A Siemens infrastructure engineer with no prior Go experience built kube-radar, an open-source command-line tool designed to detect dangerous RBAC wildcard permission violations in Kubernetes clusters. The developer manages production-grade Kubernetes infrastructure at Siemens, where a misconfigured RoleBinding can expose critical systems to full cluster compromise. Wildcard RBAC rules granting unrestricted access to all resources and verbs are a known security risk, yet they often evade standard cloud-native security scanners because they are technically valid configurations. To build the tool, the developer taught themselves Go through trial and error, working through challenges including SQLite integration, Go's error-as-values model, and CLI architecture using the Cobra framework. The finished tool supports cross-platform builds, SARIF reporting for GitHub Advanced Security, CI/CD exit-code gating, and snapshot-based diff tracking of RBAC findings over time.