Awesome

kubectl-rolesum (ex-bindrole)

Summarize RBAC roles for the specified subject (ServiceAccount, User and Group).

screenshot

Installation

krew

krew is a package manager for k8s plugins. Please see krew document for more detail.

kubectl krew install rolesum

Homebrew (for MacOS)

rolesum supports homebrew :beer:

brew install Ladicle/kubectl-bindrole/kubectl-rolesum

Binaries

The easiest way is to download binary from the release page. You can also download this repository and install it using Makefile.

Usage

$ kubectl rolesum -h  # or kubectl-rolesum -h
Summarize RBAC roles for the specified subject

Usage:
  kubectl rolesum [options] <SubjectName>

Examples:
  # Summarize roles bound to the "ci-bot" ServiceAccount.
  kubectl rolesum ci-bot

  # Summarize roles bound to the "developer" Group.
  kubectl rolesum -k Group developer

SubjectKinds:
  - ServiceAccount (default)
  - User
  - Group

Options:
  -h, --help                   Display this help message
  -n, --namespace string       Change the namespace scope for this CLI request
  -k, --subject-kind string    Set SubjectKind to summarize (default: ServiceAccount)
  -o, --options                List of all options for this command
  -c, --cluster-only           Ingore namespaced Roles and show only ClusterRoles
      --version                Show version for this command

Use "kubectl rolesum --options" for a list of all options (applies to this command).

This command supports both kubectl-plugin mode and standalone mode.