The Kubernetes plugin discovers cluster resources via the Kubernetes API and projects them into Linro's columnar storage so checks can reason about workload posture, network policies, RBAC bindings, and configuration drift across clusters.
- In-cluster or external. Works with an in-cluster service-account token or a kubeconfig pointing at a remote API server.
- Streaming optional. Watch events stream into the same pipeline AWS CloudTrail uses, with the same dedup semantics.