Security · JetBrains plugin

K8s Label-Selector Exposure Companion

Free

Kubernetes Security

Flags a workload that's Service-exposed but silently uncovered by every NetworkPolicy in the project.

55Downloads
0GitHub stars
—Published
FreePricing

The gap it fixes

"Namespace-selector-based policies can degrade silently every time a new namespace is created without the expected label", and "a pod not selected by any NetworkPolicy is not governed by any policy" -- both real, documented Kubernetes failure patterns (OWASP Kubernetes Top 10, inadequate network segmentation; CWE-284). kube-score and Checkov are CLI tools; this catalog's own k8s-resource-limit-companion/ k8s-readiness-liveness-probe-companion scan a single manifest with no selector resolution at all. No dedicated Marketplace plugin found for this exact angle.

Facts and pricing

Category
Security
Pricing
Free
Platform
IntelliJ-family
First published
—
Marketplace ID
#34064
Repository
k8s-label-selector-exposure-companion
Growth
▲ +5400.0% since 2026-09-05 (1→55)

Related plugins

All Security plugins
Need a tool like this built for your codebase?Custom static-analysis rules, CI/CD integration, private plugin distribution and performance audits for IntelliJ plugins.
Work with Joel

Download and star counts as of 2026-10-18, refreshed twice daily from the JetBrains Marketplace and GitHub APIs.