diff --git a/plugins/saconfig.yaml b/plugins/saconfig.yaml
new file mode 100644
index 00000000000..066d6101ba4
--- /dev/null
+++ b/plugins/saconfig.yaml
@@ -0,0 +1,84 @@
+apiVersion: krew.googlecontainertools.github.com/v1alpha2
+kind: Plugin
+metadata:
+  name: saconfig
+spec:
+  homepage: https://github.com/larsks/kubectl-saconfig
+  shortDescription: Generate a kubeconfig file for authenticating as a service account
+  version: v0.1.0
+  description: |
+    Request a token using the [TokenRequest] API and generate a kubeconfig file
+    for authenticating as a service account. Outputs the generated
+    configuration to stdout (default) or to a file of your choice (--output).
+    Supports impersonation if you need elevated privileges to complete the
+    token request (kubectl saconfig --as system:admin ...).
+
+    [tokenrequest]: https://kubernetes.io/docs/reference/kubernetes-api/authentication-resources/token-request-v1/
+  platforms:
+
+    - selector:
+        matchLabels:
+          os: darwin
+          arch: amd64
+      uri: https://github.com/larsks/kubectl-saconfig/releases/download/v0.1.1/kubectl-saconfig-darwin-amd64.tar.gz
+      sha256: "b5ae733a7cb07d61bc67b35b4a7ed1cc2890f84049db8742e4170cf191bdb35c"
+      bin: "./kubectl-saconfig"
+      files:
+        - from: kubectl-saconfig
+          to: .
+        - from: LICENSE
+          to: .
+
+    - selector:
+        matchLabels:
+          os: darwin
+          arch: arm64
+      uri: https://github.com/larsks/kubectl-saconfig/releases/download/v0.1.1/kubectl-saconfig-darwin-arm64.tar.gz
+      sha256: "b976e62c5913fdae1318de6f3553c0302a6435576c07580f6a0a5cdaec184b36"
+      bin: "./kubectl-saconfig"
+      files:
+        - from: kubectl-saconfig
+          to: .
+        - from: LICENSE
+          to: .
+
+    - selector:
+        matchLabels:
+          os: linux
+          arch: amd64
+      uri: https://github.com/larsks/kubectl-saconfig/releases/download/v0.1.1/kubectl-saconfig-linux-amd64.tar.gz
+      sha256: "9a3610e2e28d3c5e3aa4d4a9ce6d486229e039a8579de7b236a8b50ce8450b79"
+      bin: "./kubectl-saconfig"
+      files:
+        - from: kubectl-saconfig
+          to: .
+        - from: LICENSE
+          to: .
+
+    - selector:
+        matchLabels:
+          os: linux
+          arch: arm
+      uri: https://github.com/larsks/kubectl-saconfig/releases/download/v0.1.1/kubectl-saconfig-linux-arm.tar.gz
+      sha256: "dc2b116b19b0a5ce5fd602f801e2d4841fe930cfe58c9c7f33099acde8ac4fc9"
+      bin: "./kubectl-saconfig"
+      files:
+        - from: kubectl-saconfig
+          to: .
+        - from: LICENSE
+          to: .
+
+    - selector:
+        matchLabels:
+          os: linux
+          arch: arm64
+      uri: https://github.com/larsks/kubectl-saconfig/releases/download/v0.1.1/kubectl-saconfig-linux-arm64.tar.gz
+      sha256: "7bfeb07eb20b19f8ed919c32acfd5644b7c1cd701aa310027694680d88322847"
+      bin: "./kubectl-saconfig"
+      files:
+        - from: kubectl-saconfig
+          to: .
+        - from: LICENSE
+          to: .
+
+