ServiceAccount: kra-viewer-kra-viewer (kra-viewer)
1 roles 1 bindings ClusterRole/kra-viewer-kra-viewer
Direct binding
Via group
Cluster-level (in namespace)
Risk / wildcard
Cluster-Level Permissions
| Resource | API Group | get | list | watch | create | update | patch | delete | delcol | imp | bind | esc | appr | sign | use | prxy |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Management Objects | ||||||||||||||||
| pods | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| Infrastructure | ||||||||||||||||
| namespaces | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| nodes | core | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — | — |
| serviceaccounts | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| RBAC | ||||||||||||||||
| clusterrolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| clusterroles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| rolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| roles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| authentication.k8s.io | ||||||||||||||||
| selfsubjectreviews | authentication.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| authorization.k8s.io | ||||||||||||||||
| selfsubjectaccessreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| selfsubjectrulesreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
Namespace: kube-system
| Resource | API Group | get | list | watch | create | update | patch | delete | delcol | imp | bind | esc | appr | sign | use | prxy |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Management Objects | ||||||||||||||||
| pods | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| Infrastructure | ||||||||||||||||
| namespaces | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| nodes | core | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — | — |
| serviceaccounts | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| RBAC | ||||||||||||||||
| clusterrolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| clusterroles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| rolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| roles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| authentication.k8s.io | ||||||||||||||||
| selfsubjectreviews | authentication.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| authorization.k8s.io | ||||||||||||||||
| selfsubjectaccessreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| selfsubjectrulesreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
Namespace: temp
| Resource | API Group | get | list | watch | create | update | patch | delete | delcol | imp | bind | esc | appr | sign | use | prxy |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Management Objects | ||||||||||||||||
| pods | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| Infrastructure | ||||||||||||||||
| namespaces | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| nodes | core | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — | — |
| serviceaccounts | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| RBAC | ||||||||||||||||
| clusterrolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| clusterroles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| rolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| roles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| authentication.k8s.io | ||||||||||||||||
| selfsubjectreviews | authentication.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| authorization.k8s.io | ||||||||||||||||
| selfsubjectaccessreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| selfsubjectrulesreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
Namespace: client-ip
| Resource | API Group | get | list | watch | create | update | patch | delete | delcol | imp | bind | esc | appr | sign | use | prxy |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Management Objects | ||||||||||||||||
| pods | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| Infrastructure | ||||||||||||||||
| namespaces | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| nodes | core | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — | — |
| serviceaccounts | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| RBAC | ||||||||||||||||
| clusterrolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| clusterroles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| rolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| roles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| authentication.k8s.io | ||||||||||||||||
| selfsubjectreviews | authentication.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| authorization.k8s.io | ||||||||||||||||
| selfsubjectaccessreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| selfsubjectrulesreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
Namespace: kube-node-lease
| Resource | API Group | get | list | watch | create | update | patch | delete | delcol | imp | bind | esc | appr | sign | use | prxy |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Management Objects | ||||||||||||||||
| pods | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| Infrastructure | ||||||||||||||||
| namespaces | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| nodes | core | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — | — |
| serviceaccounts | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| RBAC | ||||||||||||||||
| clusterrolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| clusterroles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| rolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| roles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| authentication.k8s.io | ||||||||||||||||
| selfsubjectreviews | authentication.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| authorization.k8s.io | ||||||||||||||||
| selfsubjectaccessreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| selfsubjectrulesreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
Namespace: kube-public
| Resource | API Group | get | list | watch | create | update | patch | delete | delcol | imp | bind | esc | appr | sign | use | prxy |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Management Objects | ||||||||||||||||
| pods | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| Infrastructure | ||||||||||||||||
| namespaces | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| nodes | core | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — | — |
| serviceaccounts | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| RBAC | ||||||||||||||||
| clusterrolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| clusterroles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| rolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| roles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| authentication.k8s.io | ||||||||||||||||
| selfsubjectreviews | authentication.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| authorization.k8s.io | ||||||||||||||||
| selfsubjectaccessreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| selfsubjectrulesreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
Namespace: wordpress
| Resource | API Group | get | list | watch | create | update | patch | delete | delcol | imp | bind | esc | appr | sign | use | prxy |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Management Objects | ||||||||||||||||
| pods | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| Infrastructure | ||||||||||||||||
| namespaces | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| nodes | core | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — | — |
| serviceaccounts | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| RBAC | ||||||||||||||||
| clusterrolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| clusterroles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| rolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| roles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| authentication.k8s.io | ||||||||||||||||
| selfsubjectreviews | authentication.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| authorization.k8s.io | ||||||||||||||||
| selfsubjectaccessreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| selfsubjectrulesreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
Namespace: kra-viewer
| Resource | API Group | get | list | watch | create | update | patch | delete | delcol | imp | bind | esc | appr | sign | use | prxy |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Management Objects | ||||||||||||||||
| pods | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| Infrastructure | ||||||||||||||||
| namespaces | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| nodes | core | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — | — |
| serviceaccounts | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| RBAC | ||||||||||||||||
| clusterrolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| clusterroles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| rolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| roles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| authentication.k8s.io | ||||||||||||||||
| selfsubjectreviews | authentication.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| authorization.k8s.io | ||||||||||||||||
| selfsubjectaccessreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| selfsubjectrulesreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
Namespace: longhorn-system
| Resource | API Group | get | list | watch | create | update | patch | delete | delcol | imp | bind | esc | appr | sign | use | prxy |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Management Objects | ||||||||||||||||
| pods | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| Infrastructure | ||||||||||||||||
| namespaces | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| nodes | core | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — | — |
| serviceaccounts | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| RBAC | ||||||||||||||||
| clusterrolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| clusterroles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| rolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| roles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| authentication.k8s.io | ||||||||||||||||
| selfsubjectreviews | authentication.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| authorization.k8s.io | ||||||||||||||||
| selfsubjectaccessreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| selfsubjectrulesreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
Namespace: default
| Resource | API Group | get | list | watch | create | update | patch | delete | delcol | imp | bind | esc | appr | sign | use | prxy |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Management Objects | ||||||||||||||||
| pods | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| Infrastructure | ||||||||||||||||
| namespaces | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| nodes | core | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — | — |
| serviceaccounts | core | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| RBAC | ||||||||||||||||
| clusterrolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| clusterroles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| rolebindings | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| roles | rbac.authorization.k8s.io | ✓ | ✓ | ✓ | — | — | — | — | — | — | — | — | — | — | — | — |
| authentication.k8s.io | ||||||||||||||||
| selfsubjectreviews | authentication.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| authorization.k8s.io | ||||||||||||||||
| selfsubjectaccessreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |
| selfsubjectrulesreviews | authorization.k8s.io | — | — | — | ✓ | — | — | — | — | — | — | — | — | — | — | — |