admin
ClusterRole Aggregated33 rules 0 bound subjects
Aggregates roles matching: rbac.authorization.k8s.io/aggregate-to-admin=true
Labels & Annotations 2
Labels
kubernetes.io/bootstrapping=rbac-defaults
Annotations
Direct binding
Via group
Cluster-level (in namespace)
Risk / wildcard
Role Permissions
| Resource | API Group | get | list | watch | create | update | patch | delete | delcol | imp | bind | esc | appr | sign | use | prxy |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Management Objects | ||||||||||||||||
| controllerrevisions | apps | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| cronjobs | batch | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| cronjobs/status | batch | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| daemonsets | apps | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| daemonsets/status | apps | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| deployments | apps | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| deployments/rollback | apps | — | — | — | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| deployments/scale | apps | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| deployments/status | apps | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| horizontalpodautoscalers | autoscaling | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| horizontalpodautoscalers/status | autoscaling | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| jobs | batch | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| jobs/status | batch | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| poddisruptionbudgets | policy | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| poddisruptionbudgets/status | policy | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| pods | core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| pods/attach | core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| pods/eviction | core | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| pods/exec | core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| pods/log | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| pods/portforward | core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| pods/proxy | core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| pods/status | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| replicasets | apps | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| replicasets/scale | apps | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| replicasets/status | apps | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| replicationcontrollers | core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| replicationcontrollers/scale | core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| replicationcontrollers/status | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| services | core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| services/proxy | core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| services/status | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| statefulsets | apps | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| statefulsets/scale | apps | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| statefulsets/status | apps | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| Data | ||||||||||||||||
| configmaps | core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| secrets SENSITIVE | core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| Networking | ||||||||||||||||
| endpoints | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| ingresses | networking.k8s.io | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| ingresses/status | networking.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| networkpolicies | networking.k8s.io | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| Storage | ||||||||||||||||
| persistentvolumeclaims | core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| persistentvolumeclaims/status | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| Infrastructure | ||||||||||||||||
| events | core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| leases | coordination.k8s.io | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| limitranges | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| namespaces | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| namespaces/status | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| resourcequotas | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| resourcequotas/status | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| serviceaccounts | core | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — |
| serviceaccounts/token | core | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| RBAC | ||||||||||||||||
| rolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| roles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| acme.cert-manager.io | ||||||||||||||||
| challenges | acme.cert-manager.io | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| orders | acme.cert-manager.io | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| authorization.k8s.io | ||||||||||||||||
| localsubjectaccessreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| cert-manager.io | ||||||||||||||||
| certificaterequests | cert-manager.io | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| certificates | cert-manager.io | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| certificates/status | cert-manager.io | — | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — |
| issuers | cert-manager.io | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| core | ||||||||||||||||
| bindings | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| discovery.k8s.io | ||||||||||||||||
| endpointslices | discovery.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| extensions | ||||||||||||||||
| daemonsets | extensions | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| daemonsets/status | extensions | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| deployments | extensions | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| deployments/rollback | extensions | — | — | — | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| deployments/scale | extensions | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| deployments/status | extensions | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| ingresses | extensions | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| ingresses/status | extensions | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| networkpolicies | extensions | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| replicasets | extensions | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| replicasets/scale | extensions | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| replicasets/status | extensions | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| replicationcontrollers/scale | extensions | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| metrics.k8s.io | ||||||||||||||||
| nodes | metrics.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| pods | metrics.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| resource.k8s.io | ||||||||||||||||
| resourceclaims | resource.k8s.io | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |
| resourceclaims/status | resource.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| resourceclaimtemplates | resource.k8s.io | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | — | — | — | — | — | — | — |