We already do those things with k8s, so it's not an issue

The permissions issues you mention are handled by SA/WIF and the ADK framework.

Same question to OP, why do you think I need a special tool for this?