Search code examples
kubernetesrbac

How to list my current RBAC roles and groups I belong to?


I authenticated to kubernetes cluster, how can I view my RBAC roles and groups attached to my current account?


Solution

  • Found better tool

    this tool looks way better than rakkess
    exactly what I was looking for

    https://github.com/reactiveops/rbac-lookup

    In the simplest use case, rbac-lookup will return any matching user, service account, or group along with the roles it has been given.

    rbac-lookup rob
    
    SUBJECT                   SCOPE             ROLE
    rob@example.com           cluster-wide      ClusterRole/view
    rob@example.com           nginx-ingress     ClusterRole/edit
    The wide output option includes the kind of subject along with the source role binding.
    
    rbac-lookup ro --output wide
    
    SUBJECT                   SCOPE             ROLE                SOURCE
    User/rob@example.com      cluster-wide      ClusterRole/view    ClusterRoleBinding/rob-cluster-view
    User/rob@example.com      nginx-ingress     ClusterRole/edit    RoleBinding/rob-edit
    User/ron@example.com      web               ClusterRole/edit    RoleBinding/ron-edit
    ServiceAccount/rops       infra             ClusterRole/admin   RoleBinding/rops-admin