Kubernetes

RBAC Role & Binding Generator

Build a Role or ClusterRole with its binding, and have over-broad grants flagged.

Scope

Role name

Namespace

Rules

Rule 1

API group

Resources

Verbs

Resource names (optional, comma separated)

Restricts the rule to named objects. Note that list and watch cannot be limited this way.

Bind to

RoleBinding

Subject kind

Subject name

Subject namespace

Also emit the ServiceAccount

Output · Role