github.com/alcideio/rbac-tool
v1.20.0
alcideio/rbac-tool
What this package is like to depend on
Last release 2 years ago
no release in 18 months
Ships fairly regularly
a new release about every 2 months
Rarely documented
notes for 10 of 50 stable releases
Nothing withdrawn
no release was ever pulled
6 years old
64 releases · first in 2020
0 releases in the last 12 months
see the full history below
Release timeline
64 releases · Mar 2020 to Oct 2024Releases
latest 60 of 64-
v1.20.029 Oct 2024Release notes
Open source →| insightCloudSec | RBAC TOOL
A collection of Kubernetes RBAC tools to sugar coat Kubernetes RBAC complexity
Install
Standalone
curl https://raw.githubusercontent.com/alcideio/rbac-tool/master/download.sh | bashkubectl plugin // //
$ kubectl krew install rbac-tool
Command Line Examples (Standalone)
# Show which users/groups/service accounts are allowed to read secrets in the cluster pointed by kubeconfig rbac-tool who-can get secrets # Show the subject information of the the one authenticates against the current cluster context rbac-tool whoami # Scan the cluster pointed by the kubeconfig context 'myctx' rbac-tool viz --cluster-context myctx # Scan and create a PNG image from the graph rbac-tool viz --outformat dot --exclude-namespaces=soemns && cat rbac.dot | dot -Tpng > rbac.png && google-chrome rbac.png # Render Online https://dreampuf.github.io/GraphvizOnline # Analyze cluster RBAC permissions to identify overly permissive roles and principals rbac-tool analysis -o table # Search All Service Accounts That Contains myname rbac-tool lookup -e '.*myname.*' # Lookup all accounts that DO NOT start with system: ) rbac-tool lookup -ne '^system:.*' # List policy rules for users (or all of them) rbac-tool policy-rules -e '^system:anonymous' # Generate from Audit events & Visualize rbac-tool auditgen -f testdata | rbac-tool viz -f - # Generate a `ClusterRole` policy that allows to read everything **except** *secrets* and *services* rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Generate a ClusterRole with all the available permissions for core and apps api groups rbac-tool show --for-groups=,apps
kubectl rbac-tool ...
# Generate HTML visualzation of your RBAC permissions kubectl rbac-tool viz # Query who can read secrets kubectl rbac-tool who-can get secret # Generate a ClusterRole policy that allows to read everything except secrets and services kubectl rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Analyze cluster RBAC permissions to identify overly permissive roles and principals kubectl rbac-tool analysis -o table # Generate a ClusterRole with all the available permissions for core and apps api groups kubectl rbac-tool show --for-groups=,apps # Show the subject information of the the one authenticates against the current cluster context kubectl rbac-tool whoami
-
v1.19.1-0.20240729141902-4b6041bf78ae29 Jul 2024 pre-releaseNothing published for this version
-
v1.19.003 Jun 2024Release notes
Open source →| insightCloudSec | RBAC TOOL
A collection of Kubernetes RBAC tools to sugar coat Kubernetes RBAC complexity
Install
Standalone
curl https://raw.githubusercontent.com/alcideio/rbac-tool/master/download.sh | bashkubectl plugin // //
$ kubectl krew install rbac-tool
Command Line Examples (Standalone)
# Show which users/groups/service accounts are allowed to read secrets in the cluster pointed by kubeconfig rbac-tool who-can get secrets # Show the subject information of the the one authenticates against the current cluster context rbac-tool whoami # Scan the cluster pointed by the kubeconfig context 'myctx' rbac-tool viz --cluster-context myctx # Scan and create a PNG image from the graph rbac-tool viz --outformat dot --exclude-namespaces=soemns && cat rbac.dot | dot -Tpng > rbac.png && google-chrome rbac.png # Render Online https://dreampuf.github.io/GraphvizOnline # Analyze cluster RBAC permissions to identify overly permissive roles and principals rbac-tool analysis -o table # Search All Service Accounts That Contains myname rbac-tool lookup -e '.*myname.*' # Lookup all accounts that DO NOT start with system: ) rbac-tool lookup -ne '^system:.*' # List policy rules for users (or all of them) rbac-tool policy-rules -e '^system:anonymous' # Generate from Audit events & Visualize rbac-tool auditgen -f testdata | rbac-tool viz -f - # Generate a `ClusterRole` policy that allows to read everything **except** *secrets* and *services* rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Generate a ClusterRole with all the available permissions for core and apps api groups rbac-tool show --for-groups=,apps
kubectl rbac-tool ...
# Generate HTML visualzation of your RBAC permissions kubectl rbac-tool viz # Query who can read secrets kubectl rbac-tool who-can get secret # Generate a ClusterRole policy that allows to read everything except secrets and services kubectl rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Analyze cluster RBAC permissions to identify overly permissive roles and principals kubectl rbac-tool analysis -o table # Generate a ClusterRole with all the available permissions for core and apps api groups kubectl rbac-tool show --for-groups=,apps # Show the subject information of the the one authenticates against the current cluster context kubectl rbac-tool whoami
-
v1.18.1-0.20240507151151-b531a2fe7f9107 May 2024 pre-releaseNothing published for this version
-
v1.18.006 May 2024Release notes
Open source →| insightCloudSec | RBAC TOOL
A collection of Kubernetes RBAC tools to sugar coat Kubernetes RBAC complexity
Install
Standalone
curl https://raw.githubusercontent.com/alcideio/rbac-tool/master/download.sh | bashkubectl plugin // //
$ kubectl krew install rbac-tool
Command Line Examples (Standalone)
# Show which users/groups/service accounts are allowed to read secrets in the cluster pointed by kubeconfig rbac-tool who-can get secrets # Show the subject information of the the one authenticates against the current cluster context rbac-tool whoami # Scan the cluster pointed by the kubeconfig context 'myctx' rbac-tool viz --cluster-context myctx # Scan and create a PNG image from the graph rbac-tool viz --outformat dot --exclude-namespaces=soemns && cat rbac.dot | dot -Tpng > rbac.png && google-chrome rbac.png # Render Online https://dreampuf.github.io/GraphvizOnline # Analyze cluster RBAC permissions to identify overly permissive roles and principals rbac-tool analysis -o table # Search All Service Accounts That Contains myname rbac-tool lookup -e '.*myname.*' # Lookup all accounts that DO NOT start with system: ) rbac-tool lookup -ne '^system:.*' # List policy rules for users (or all of them) rbac-tool policy-rules -e '^system:anonymous' # Generate from Audit events & Visualize rbac-tool auditgen -f testdata | rbac-tool viz -f - # Generate a `ClusterRole` policy that allows to read everything **except** *secrets* and *services* rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Generate a ClusterRole with all the available permissions for core and apps api groups rbac-tool show --for-groups=,apps
kubectl rbac-tool ...
# Generate HTML visualzation of your RBAC permissions kubectl rbac-tool viz # Query who can read secrets kubectl rbac-tool who-can get secret # Generate a ClusterRole policy that allows to read everything except secrets and services kubectl rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Analyze cluster RBAC permissions to identify overly permissive roles and principals kubectl rbac-tool analysis -o table # Generate a ClusterRole with all the available permissions for core and apps api groups kubectl rbac-tool show --for-groups=,apps # Show the subject information of the the one authenticates against the current cluster context kubectl rbac-tool whoami
-
v1.17.005 May 2024Release notes
Open source →| insightCloudSec | RBAC TOOL
A collection of Kubernetes RBAC tools to sugar coat Kubernetes RBAC complexity
Install
Standalone
curl https://raw.githubusercontent.com/alcideio/rbac-tool/master/download.sh | bashkubectl plugin // //
$ kubectl krew install rbac-tool
Command Line Examples (Standalone)
# Show which users/groups/service accounts are allowed to read secrets in the cluster pointed by kubeconfig rbac-tool who-can get secrets # Show the subject information of the the one authenticates against the current cluster context rbac-tool whoami # Scan the cluster pointed by the kubeconfig context 'myctx' rbac-tool viz --cluster-context myctx # Scan and create a PNG image from the graph rbac-tool viz --outformat dot --exclude-namespaces=soemns && cat rbac.dot | dot -Tpng > rbac.png && google-chrome rbac.png # Render Online https://dreampuf.github.io/GraphvizOnline # Analyze cluster RBAC permissions to identify overly permissive roles and principals rbac-tool analysis -o table # Search All Service Accounts That Contains myname rbac-tool lookup -e '.*myname.*' # Lookup all accounts that DO NOT start with system: ) rbac-tool lookup -ne '^system:.*' # List policy rules for users (or all of them) rbac-tool policy-rules -e '^system:anonymous' # Generate from Audit events & Visualize rbac-tool auditgen -f testdata | rbac-tool viz -f - # Generate a `ClusterRole` policy that allows to read everything **except** *secrets* and *services* rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Generate a ClusterRole with all the available permissions for core and apps api groups rbac-tool show --for-groups=,apps
kubectl rbac-tool ...
# Generate HTML visualzation of your RBAC permissions kubectl rbac-tool viz # Query who can read secrets kubectl rbac-tool who-can get secret # Generate a ClusterRole policy that allows to read everything except secrets and services kubectl rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Analyze cluster RBAC permissions to identify overly permissive roles and principals kubectl rbac-tool analysis -o table # Generate a ClusterRole with all the available permissions for core and apps api groups kubectl rbac-tool show --for-groups=,apps # Show the subject information of the the one authenticates against the current cluster context kubectl rbac-tool whoami
-
v1.16.014 Feb 2024Release notes
Open source →| insightCloudSec | RBAC TOOL
A collection of Kubernetes RBAC tools to sugar coat Kubernetes RBAC complexity
Install
Standalone
curl https://raw.githubusercontent.com/alcideio/rbac-tool/master/download.sh | bashkubectl plugin // //
$ kubectl krew install rbac-tool
Command Line Examples (Standalone)
# Show which users/groups/service accounts are allowed to read secrets in the cluster pointed by kubeconfig rbac-tool who-can get secrets # Show the subject information of the the one authenticates against the current cluster context rbac-tool whoami # Scan the cluster pointed by the kubeconfig context 'myctx' rbac-tool viz --cluster-context myctx # Scan and create a PNG image from the graph rbac-tool viz --outformat dot --exclude-namespaces=soemns && cat rbac.dot | dot -Tpng > rbac.png && google-chrome rbac.png # Render Online https://dreampuf.github.io/GraphvizOnline # Analyze cluster RBAC permissions to identify overly permissive roles and principals rbac-tool analysis -o table # Search All Service Accounts That Contains myname rbac-tool lookup -e '.*myname.*' # Lookup all accounts that DO NOT start with system: ) rbac-tool lookup -ne '^system:.*' # List policy rules for users (or all of them) rbac-tool policy-rules -e '^system:anonymous' # Generate from Audit events & Visualize rbac-tool auditgen -f testdata | rbac-tool viz -f - # Generate a `ClusterRole` policy that allows to read everything **except** *secrets* and *services* rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Generate a ClusterRole with all the available permissions for core and apps api groups rbac-tool show --for-groups=,apps
kubectl rbac-tool ...
# Generate HTML visualzation of your RBAC permissions kubectl rbac-tool viz # Query who can read secrets kubectl rbac-tool who-can get secret # Generate a ClusterRole policy that allows to read everything except secrets and services kubectl rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Analyze cluster RBAC permissions to identify overly permissive roles and principals kubectl rbac-tool analysis -o table # Generate a ClusterRole with all the available permissions for core and apps api groups kubectl rbac-tool show --for-groups=,apps # Show the subject information of the the one authenticates against the current cluster context kubectl rbac-tool whoami
-
v1.15.1-0.20240214175249-98ac2d8b613714 Feb 2024 pre-releaseNothing published for this version
-
v1.15.008 Jan 2024Release notes
Open source →| insightCloudSec | RBAC TOOL
A collection of Kubernetes RBAC tools to sugar coat Kubernetes RBAC complexity
Install
Standalone
curl https://raw.githubusercontent.com/alcideio/rbac-tool/master/download.sh | bashkubectl plugin // //
$ kubectl krew install rbac-tool
Command Line Examples (Standalone)
# Show which users/groups/service accounts are allowed to read secrets in the cluster pointed by kubeconfig rbac-tool who-can get secrets # Show the subject information of the the one authenticates against the current cluster context rbac-tool whoami # Scan the cluster pointed by the kubeconfig context 'myctx' rbac-tool viz --cluster-context myctx # Scan and create a PNG image from the graph rbac-tool viz --outformat dot --exclude-namespaces=soemns && cat rbac.dot | dot -Tpng > rbac.png && google-chrome rbac.png # Render Online https://dreampuf.github.io/GraphvizOnline # Analyze cluster RBAC permissions to identify overly permissive roles and principals rbac-tool analysis -o table # Search All Service Accounts That Contains myname rbac-tool lookup -e '.*myname.*' # Lookup all accounts that DO NOT start with system: ) rbac-tool lookup -ne '^system:.*' # List policy rules for users (or all of them) rbac-tool policy-rules -e '^system:anonymous' # Generate from Audit events & Visualize rbac-tool auditgen -f testdata | rbac-tool viz -f - # Generate a `ClusterRole` policy that allows to read everything **except** *secrets* and *services* rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Generate a ClusterRole with all the available permissions for core and apps api groups rbac-tool show --for-groups=,apps
kubectl rbac-tool ...
# Generate HTML visualzation of your RBAC permissions kubectl rbac-tool viz # Query who can read secrets kubectl rbac-tool who-can get secret # Generate a ClusterRole policy that allows to read everything except secrets and services kubectl rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Analyze cluster RBAC permissions to identify overly permissive roles and principals kubectl rbac-tool analysis -o table # Generate a ClusterRole with all the available permissions for core and apps api groups kubectl rbac-tool show --for-groups=,apps # Show the subject information of the the one authenticates against the current cluster context kubectl rbac-tool whoami
-
v1.14.526 Sep 2023Release notes
Open source →| insightCloudSec | RBAC TOOL
A collection of Kubernetes RBAC tools to sugar coat Kubernetes RBAC complexity
Install
Standalone
curl https://raw.githubusercontent.com/alcideio/rbac-tool/master/download.sh | bashkubectl plugin // //
$ kubectl krew install rbac-tool
Command Line Examples (Standalone)
# Show which users/groups/service accounts are allowed to read secrets in the cluster pointed by kubeconfig rbac-tool who-can get secrets # Show the subject information of the the one authenticates against the current cluster context rbac-tool whoami # Scan the cluster pointed by the kubeconfig context 'myctx' rbac-tool viz --cluster-context myctx # Scan and create a PNG image from the graph rbac-tool viz --outformat dot --exclude-namespaces=soemns && cat rbac.dot | dot -Tpng > rbac.png && google-chrome rbac.png # Render Online https://dreampuf.github.io/GraphvizOnline # Analyze cluster RBAC permissions to identify overly permissive roles and principals rbac-tool analysis -o table # Search All Service Accounts That Contains myname rbac-tool lookup -e '.*myname.*' # Lookup all accounts that DO NOT start with system: ) rbac-tool lookup -ne '^system:.*' # List policy rules for users (or all of them) rbac-tool policy-rules -e '^system:anonymous' # Generate from Audit events & Visualize rbac-tool auditgen -f testdata | rbac-tool viz -f - # Generate a `ClusterRole` policy that allows to read everything **except** *secrets* and *services* rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Generate a ClusterRole with all the available permissions for core and apps api groups rbac-tool show --for-groups=,apps
kubectl rbac-tool ...
# Generate HTML visualzation of your RBAC permissions kubectl rbac-tool viz # Query who can read secrets kubectl rbac-tool who-can get secret # Generate a ClusterRole policy that allows to read everything except secrets and services kubectl rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Analyze cluster RBAC permissions to identify overly permissive roles and principals kubectl rbac-tool analysis -o table # Generate a ClusterRole with all the available permissions for core and apps api groups kubectl rbac-tool show --for-groups=,apps # Show the subject information of the the one authenticates against the current cluster context kubectl rbac-tool whoami
-
v1.14.412 Jun 2023Release notes
Open source →| insightCloudSec | RBAC TOOL
A collection of Kubernetes RBAC tools to sugar coat Kubernetes RBAC complexity
Install
Standalone
curl https://raw.githubusercontent.com/alcideio/rbac-tool/master/download.sh | bashkubectl plugin // //
$ kubectl krew install rbac-tool
Command Line Examples (Standalone)
# Show which users/groups/service accounts are allowed to read secrets in the cluster pointed by kubeconfig rbac-tool who-can get secrets # Show the subject information of the the one authenticates against the current cluster context rbac-tool whoami # Scan the cluster pointed by the kubeconfig context 'myctx' rbac-tool viz --cluster-context myctx # Scan and create a PNG image from the graph rbac-tool viz --outformat dot --exclude-namespaces=soemns && cat rbac.dot | dot -Tpng > rbac.png && google-chrome rbac.png # Render Online https://dreampuf.github.io/GraphvizOnline # Analyze cluster RBAC permissions to identify overly permissive roles and principals rbac-tool analysis -o table # Search All Service Accounts That Contains myname rbac-tool lookup -e '.*myname.*' # Lookup all accounts that DO NOT start with system: ) rbac-tool lookup -ne '^system:.*' # List policy rules for users (or all of them) rbac-tool policy-rules -e '^system:anonymous' # Generate from Audit events & Visualize rbac-tool auditgen -f testdata | rbac-tool viz -f - # Generate a `ClusterRole` policy that allows to read everything **except** *secrets* and *services* rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Generate a ClusterRole with all the available permissions for core and apps api groups rbac-tool show --for-groups=,apps
kubectl rbac-tool ...
# Generate HTML visualzation of your RBAC permissions kubectl rbac-tool viz # Query who can read secrets kubectl rbac-tool who-can get secret # Generate a ClusterRole policy that allows to read everything except secrets and services kubectl rbac-tool gen --deny-resources=secrets.,services. --allowed-verbs=get,list # Analyze cluster RBAC permissions to identify overly permissive roles and principals kubectl rbac-tool analysis -o table # Generate a ClusterRole with all the available permissions for core and apps api groups kubectl rbac-tool show --for-groups=,apps # Show the subject information of the the one authenticates against the current cluster context kubectl rbac-tool whoami
-
v1.14.312 Jun 2023 -
v1.14.212 Jun 2023 -
v1.14.2-0.20230201122320-e69a24f4d28701 Feb 2023 pre-releaseNothing published for this version
-
v1.14.101 Feb 2023Nothing published for this version
-
v1.14.009 Jan 2023Nothing published for this version
-
v1.13.1-0.20230109171055-70e7923dec6109 Jan 2023 pre-releaseNothing published for this version
-
v1.13.021 Nov 2022Nothing published for this version
-
v1.12.017 Nov 2022Nothing published for this version
-
v1.11.117 Nov 2022Nothing published for this version
-
v1.11.020 Oct 2022Nothing published for this version
-
v1.10.102 Oct 2022Nothing published for this version
-
v1.10.030 Sep 2022Nothing published for this version
-
v1.9.019 Jul 2022Nothing published for this version
-
v1.8.003 Jul 2022Nothing published for this version
-
v1.7.116 Jun 2022Nothing published for this version
-
v1.7.016 Jun 2022Nothing published for this version
-
v1.6.327 Jan 2022Nothing published for this version
-
v1.6.217 Nov 2021Nothing published for this version
-
v1.6.2-0.20211117112753-7c64cc6dcd4017 Nov 2021 pre-releaseNothing published for this version
-
v1.6.101 Nov 2021Nothing published for this version
-
v1.6.025 Oct 2021Nothing published for this version
-
v1.5.018 Oct 2021Nothing published for this version
-
v1.4.2-0.20211018075344-fb1e18cf4aeb18 Oct 2021 pre-releaseNothing published for this version
-
v1.4.113 Oct 2021Nothing published for this version
-
v1.4.1-0.20211013171003-45249fd75bee13 Oct 2021 pre-releaseNothing published for this version
-
v1.4.011 Oct 2021Nothing published for this version
-
v1.3.029 Sep 2021Nothing published for this version
-
v1.2.2-0.20210929124545-5c72dcf5951929 Sep 2021 pre-releaseNothing published for this version
-
v1.2.129 Aug 2021Nothing published for this version
-
v1.2.020 Jul 2021Nothing published for this version
-
v1.1.5-0.20210719135759-a8f5ae00143e19 Jul 2021 pre-releaseNothing published for this version
-
v1.1.419 Jul 2021Nothing published for this version
-
v1.1.319 Jul 2021Nothing published for this version
-
v1.1.219 Jul 2021Nothing published for this version
-
v1.1.111 Jul 2021Nothing published for this version
-
v1.1.028 Jun 2021Nothing published for this version
-
v1.0.1-0.20210614181022-9115a221c0e914 Jun 2021 pre-releaseNothing published for this version
-
v1.0.030 May 2021Nothing published for this version
-
v0.10.2-0.20210105050218-50fc18204e9b05 Jan 2021 pre-releaseNothing published for this version
-
v0.10.112 Oct 2020Nothing published for this version
-
v0.10.017 Jul 2020Nothing published for this version
-
v0.9.126 Jun 2020Nothing published for this version
-
v0.9.1-0.20200611072925-a944077b0e5911 Jun 2020 pre-releaseNothing published for this version
-
v0.9.030 May 2020Nothing published for this version
-
v0.8.018 May 2020Nothing published for this version
-
v0.8.0-rc118 May 2020 pre-releaseNothing published for this version
-
v0.7.029 Apr 2020Nothing published for this version
-
v0.6.225 Apr 2020Nothing published for this version
-
v0.6.121 Apr 2020Nothing published for this version