Skip to content
Finding Kubernetes Roles bound to a specified ServiceAccount, Group or User.
Go Shell Makefile
Branch: master
Clone or download
Latest commit fa6592a Jul 30, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
.github/ISSUE_TEMPLATE
cmd Support client auth plugins Jul 30, 2019
img Add installation and usage guide May 18, 2019
pkg Make output more pretty May 18, 2019
.gitignore Add building scripts for windows May 23, 2019
Makefile Add building scripts for windows May 23, 2019
README.md
go.mod Make output more pretty May 18, 2019
go.sum
main.go add auth plugin May 24, 2019
release.sh Add building scripts for windows May 23, 2019
test.sh Make output more pretty May 18, 2019

README.md

kubectl-bindrole

Finding Kubernetes Roles bound to a specified ServiceAccount, Group or User.

screenshot

Installation

for macOS

bindrole supports homebrew 🍺

brew tap Ladicle/kubectl-bindrole
brew install kubectl-bindrole

for other devices

The easiest way is to download binary from the release page. You can also download this repository and install it using Makefile.

Usage

$ kubectl-bindrole -h  # or kubectl bindrole -h

Usage of kubectl-bindrole:
      --as string                      Username to impersonate for the operation
      --as-group stringArray           Group to impersonate for the operation, this flag can be repeated to specify multiple groups.
      --cache-dir string               Default HTTP cache directory (default "/home/ladicle/.kube/http-cache")
      --certificate-authority string   Path to a cert file for the certificate authority
      --client-certificate string      Path to a client certificate file for TLS
      --client-key string              Path to a client key file for TLS
      --cluster string                 The name of the kubeconfig cluster to use
      --context string                 The name of the kubeconfig context to use
      --insecure-skip-tls-verify       If true, the server's certificate will not be checked for validity. This will make your HTTPS connections insecure
      --kubeconfig string              Path to the kubeconfig file to use for CLI requests.
  -n, --namespace string               If present, the namespace scope for this CLI request
      --request-timeout string         The length of time to wait before giving up on a single server request. Non-zero values should contain a corresponding time unit (e.g. 1s, 2m, 3h). A value of zero means don't timeout requests. (default "0")
  -s, --server string                  The address and port of the Kubernetes API server
  -k, --subject-kind string            The Kind of subject which is bound Roles. (default "ServiceAccount")
      --token string                   Bearer token for authentication to the API server
      --user string                    The name of the kubeconfig user to use
  -v, --version                        Print command version

This command works both as a kubectl plugin and as a standalone.

You can’t perform that action at this time.