diff --git a/plugins/saconfig.yaml b/plugins/saconfig.yaml
new file mode 100644
index 00000000000..e1534e69f9c
--- /dev/null
+++ b/plugins/saconfig.yaml
@@ -0,0 +1,84 @@
+apiVersion: krew.googlecontainertools.github.com/v1alpha2
+kind: Plugin
+metadata:
+  name: saconfig
+spec:
+  homepage: https://github.com/larsks/kubectl-saconfig
+  shortDescription: Generate a kubeconfig file for authenticating as a service account
+  version: v0.1.1
+  description: |
+    Request a token using the [TokenRequest] API and generate a kubeconfig file
+    for authenticating as a service account. Outputs the generated
+    configuration to stdout (default) or to a file of your choice (--output).
+    Supports impersonation if you need elevated privileges to complete the
+    token request (kubectl saconfig --as system:admin ...).
+
+    [tokenrequest]: https://kubernetes.io/docs/reference/kubernetes-api/authentication-resources/token-request-v1/
+  platforms:
+
+    - selector:
+        matchLabels:
+          os: darwin
+          arch: amd64
+      uri: https://github.com/larsks/kubectl-saconfig/releases/download/v0.1.1/kubectl-saconfig-darwin-amd64.tar.gz
+      sha256: "a59dc28798f84375eb85bbb80e3753a679c39bf42305574fae6a78ed47afa9df"
+      bin: "./kubectl-saconfig"
+      files:
+        - from: kubectl-saconfig
+          to: .
+        - from: LICENSE
+          to: .
+
+    - selector:
+        matchLabels:
+          os: darwin
+          arch: arm64
+      uri: https://github.com/larsks/kubectl-saconfig/releases/download/v0.1.1/kubectl-saconfig-darwin-arm64.tar.gz
+      sha256: "63c875cdb049d07dd52100c45cbf2aac4696effd5777040d844be5bc5791e637"
+      bin: "./kubectl-saconfig"
+      files:
+        - from: kubectl-saconfig
+          to: .
+        - from: LICENSE
+          to: .
+
+    - selector:
+        matchLabels:
+          os: linux
+          arch: amd64
+      uri: https://github.com/larsks/kubectl-saconfig/releases/download/v0.1.1/kubectl-saconfig-linux-amd64.tar.gz
+      sha256: "4166ccbe2eb96e4f4e180cfcccf0fd2ce241b0a61942f81835377c79ee2808e0"
+      bin: "./kubectl-saconfig"
+      files:
+        - from: kubectl-saconfig
+          to: .
+        - from: LICENSE
+          to: .
+
+    - selector:
+        matchLabels:
+          os: linux
+          arch: arm
+      uri: https://github.com/larsks/kubectl-saconfig/releases/download/v0.1.1/kubectl-saconfig-linux-arm.tar.gz
+      sha256: "7b79232534e2df9d4b086e1a763f1f79e9f6b55650f7ab6cb1dc664835163e86"
+      bin: "./kubectl-saconfig"
+      files:
+        - from: kubectl-saconfig
+          to: .
+        - from: LICENSE
+          to: .
+
+    - selector:
+        matchLabels:
+          os: linux
+          arch: arm64
+      uri: https://github.com/larsks/kubectl-saconfig/releases/download/v0.1.1/kubectl-saconfig-linux-arm64.tar.gz
+      sha256: "9a47fb6da3cc9d92c06b3a89b7f0cbfa8c870005739802053e9b61c149809e2a"
+      bin: "./kubectl-saconfig"
+      files:
+        - from: kubectl-saconfig
+          to: .
+        - from: LICENSE
+          to: .
+
+