We already do those things with k8s, so it's not an issue The permissions issues you mention are handled by SA/WIF and the ADK framework. Same question to OP,

We already do those things with k8s, so it's not an issue The permissions issues you mention are handled by SA/WIF and the ADK framework. Same question to OP, why do you think I need a special tool for this?