slug: kubernetes provider: Kubernetes generated_by: planning/capability-mapping/scripts/classify_capabilities.py model: claude-opus-5 frame: - Software & Technology min_confidence: 0.7 capability_model: source: https://github.com/vincentmakes/turbo-ea-capabilities license: CC-BY-4.0 attribution: Turbo EA Capabilities by Vincent Verdet — Turbo EA, https://github.com/vincentmakes/turbo-ea-capabilities, CC BY 4.0 notice: NOTICE edge_count: 3 edges: - tag: RBAC spec_file: kubernetes-rbac-api-openapi.yml capability_id: BC-620.20 capability_id_l1: BC-620 capability_name: Identity & Access Management confidence: 0.78 evidence: '"List ClusterRoles", "Create a ClusterRole", schema "PolicyRule"' reason: Role-based access control definitions for cluster authorisation map to Identity & Access Management. - tag: Config spec_file: kubernetes-config-api-openapi.yml capability_id: BC-4210.60 capability_id_l1: BC-4210 capability_name: Configuration & Secrets Management confidence: 0.76 evidence: '"List ConfigMaps in a namespace", "Create a Secret" with schemas "ConfigMap", "Secret"' reason: ConfigMaps and Secrets are exactly runtime configuration values and secrets consumed by services, matching Configuration & Secrets Management. - tag: Cluster spec_file: kubernetes-cluster-api-openapi.yml capability_id: BC-600.50 capability_id_l1: BC-600 capability_name: IT Infrastructure Management confidence: 0.75 evidence: '"List nodes", "Get a node", "Create a namespace" with schemas "Node", "NodeStatus", "Taint"' reason: Operations manage cluster compute nodes and namespaces — compute/cloud infrastructure management.