Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

https://github.com/Ladicle/kubectl-rolesum

Summarize Kubernetes RBAC roles for the specified subjects.
https://github.com/Ladicle/kubectl-rolesum

hacktoberfest krew kubectl-plugin kubernetes podsecuritypolicies rbac

Last synced: 2 months ago
JSON representation

Summarize Kubernetes RBAC roles for the specified subjects.

Lists

README

        

# kubectl-rolesum (ex-bindrole)

Summarize RBAC roles for the specified subject (ServiceAccount, User and Group).

![screenshot](./img/screenshot.png)

## Installation

### krew

[krew](https://github.com/kubernetes-sigs/krew) is a package manager for k8s plugins.
Please see [krew document](https://github.com/kubernetes-sigs/krew) for more detail.

```bash
kubectl krew install rolesum
```

### Homebrew (for MacOS)

rolesum supports [homebrew](https://docs.brew.sh/Installation) :beer:

```bash
brew install Ladicle/kubectl-bindrole/kubectl-rolesum
```

### Binaries

The easiest way is to download binary from the [release page](https://github.com/Ladicle/kubectl-rolesum/releases).
You can also download this repository and install it using Makefile.

## Usage

```bash
$ kubectl rolesum -h # or kubectl-rolesum -h
Summarize RBAC roles for the specified subject

Usage:
kubectl rolesum [options]

Examples:
# Summarize roles bound to the "ci-bot" ServiceAccount.
kubectl rolesum ci-bot

# Summarize roles bound to the "developer" Group.
kubectl rolesum -k Group developer

SubjectKinds:
- ServiceAccount (default)
- User
- Group

Options:
-h, --help Display this help message
-n, --namespace string Change the namespace scope for this CLI request
-k, --subject-kind string Set SubjectKind to summarize (default: ServiceAccount)
-o, --options List of all options for this command
-c, --cluster-only Ingore namespaced Roles and show only ClusterRoles
--version Show version for this command

Use "kubectl rolesum --options" for a list of all options (applies to this command).
```

This command supports both kubectl-plugin mode and standalone mode.