K8s ClusterRole Builder

v1.0.0

Visual ClusterRole builder — apiGroups, resources, verbs, resourceNames, nonResourceURLs.

Role name

Namespace (empty = ClusterRole)

Resources (comma-sep)

Verbs (comma-sep)

ServiceAccount name

Kubernetes RBAC YAML

apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: app-reader
  namespace: production
rules:
  - apiGroups: ["", "apps", "extensions"]
    resources: ["pods","deployments","services"]
    verbs: ["get","list","watch"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: app-reader-binding
  namespace: production
subjects:
  - kind: ServiceAccount
    name: my-service-account
    namespace: production
roleRef:
  kind: Role
  name: app-reader
  apiGroup: rbac.authorization.k8s.io

# Apply: kubectl apply -f rbac.yaml
# Verify: kubectl auth can-i get pods --as=system:serviceaccount:production:my-service-account