v0.5.0

Changelog

• 17da387 Add --show-matched-rules-only option
• 68049ca Add PodSecurityPolicy example to create-example-rbac-rules.sh
• 630ded7 Add first impl of kubectl-rback plugin
• 7beadd0 Add option to specify a single ServiceAccount to render
• 7a2fb08 Add shell script that creates example RBAC rules
• fc40e22 Allow rendering ServiceAccounts from only a single namespace
• 556807e Also apply ignore-prefixes to namespaced resources
• ef73a31 Also highlight resource when focusing on the kind, but not the name
• b8873bf Also render ServiceAccounts from different namespaces if RoleBinding points to them
• 6d35f42 Always load all ServiceAccounts, so they don't appear missing
• 5670689 Always render Bindings as nodes (remove option to render them as edges)
• 168cd74 Camel-case in legend
• 5986c82 Change logic that determines list of namespaces to show
• 4b20f94 Change nsSubgraphs and subjectNodes to fields, so we don't need to pass them around
• d15252c Check if subject of a cluster role is nil before referencing it
• f7d3017 Check if subject of an object is nil before referencing it (team-soteria#2)
• fe7141b Clean up code a bit
• 447246a Display (Cluster)RoleBinding names
• 27681e5 Distinguish between ServiceAccounts and other kinds of subjects
• e75f31b Don't de-duplicate nodes or subgraphs, as dot.Graph already does that
• dadd91b Draw namespace in legend
• 1a28e79 Draw namespaces with dashed line
• 93d8ed3 Ensure orphan (Cluster)Roles are drawn in the same row as non-orphans
• b75b4a4 Ensure there is never more than one edge between two nodes
• 12fefe5 Exclude subjects whose names match ignored prefixes
• 5bbca13 Extract existingOrNewSubjectNode() and existingOrNewNamespaceSubgraph()
• 1b77101 Extract function parseConfigFromArgs()
• 65d087d Extract newBindingNode() and newRoleAndRulesNodePair()
• 39e934b Fix bug where "who-can get pods foo" didn't match rule "get (any) pods"
• 829de92 Fix bug where CR inside a namespace was rendered solid instead of dashed
• 9c44817 Fix bug where Role wasn't rendered when its name matched RoleBinding's
• 7e5ae88 Fix bug where Roles were shown as missing although they existed
• 1cac60d Fix bug where multiple SAs with same name were rendered as a single node
• b2f58ee Fix bug where some ClusterRoles were rendered only once
• 4b7a73b Fix bug where some Roles were shown when only focusing on ClusterRoles
• 8e949cb Fix bug where some access rules were rendered only once
• 0768883 Fix duplicated edges when displaying RoleBindings in multiple namespaces
• 3368ae1 Fix install urls
• f1c4d54 Fix variable name
• 641c301 Highlight focused resource
• 9c9f00b If focusing on SAs, only render SA referenced by RB if it exists
• 4e0f989 Initial commit
• 28b2193 Inline renderBindingAndRole()
• 1abcf76 Introduce --show-legend switch
• 16e60ba Introduce constants for kinds
• e874eb3 Introduce option to not show access rules
• 03dd1b6 Introduce option to read from file instead of stdin
• eb0cef3 Introduce single point for rendering SA nodes, Role nodes and Rules nodes
• e58d104 Introduce who-can command (e.g. "rback who-can get pods")
• 5d58898 Left-justify access rules
• d957b62 Make ignored prefixes configurable
• 94a8f2c Make it possible to focus on users and groups ("rback user my-user")
• 98e7f72 Merge pull request team-soteria#20 from gparvin/master
• 1947d62 Merge pull request team-soteria#3 from luksa/improvements
• da74dba Minor code change
• ed77976 Move graph-related functions to graph.go
• 5b19241 Multiple rendering-related fixes
• 6b3418c Properly fix bug where Roles were shown as missing although they existed
• db3794c Read RBAC resources from stdin instead of invoking kubectl
• 9079bf4 Refactor lookupBindings() into toBinding()
• abc4762 Remove code duplication in lookupResources()
• ec9e42d Remove determineNamespacesToShow()
• b761564 Remove duplicated code for looking up roles/clusterroles
• 6c78320 Remove duplicated code for rendering roles/clusterroles
• 4457d4b Remove duplicated code in getRoles/RoleBindings/ClusterRoles/ClusterRoleBindings
• 7f05162 Remove duplicated code in getServiceAccounts()
• 2e0932d Remove two unnecessary variables
• 00643c6 Remove unneeded code
• f42c17d Rename a few variables
• d4b7b9d Rename option --render-rules to --show-rules
• 9076a79 Render (Cluster)RoleBindings as nodes instead of edges
• 880da5b Render ClusterRoles inside namespaces using a dashed line
• e18c2aa Render RoleBindings even if not associated with a ServiceAccount
• daa5b75 Render Roles and ClusterRoles differently
• 97294c8 Render ServiceAccounts as boxes
• d1a92f6 Render access rules as shape:note
• 3430e53 Render access rules in a more human-readable way
• 809a6c1 Render legend in a subgraph
• 3b7750b Render missing objects with red dotted borders
• 82c6e8d Reorganize code in genGraph()
• 16f63de RoleBindings should point to Subjects, not the other way around
• b0da030 Simplify code
• ac41520 Simplify code by introducing namespaceSelected(), resourceNameSelected()
• 554ac31 Simplify code in fetchPermissions()
• 7a49658 Simplify code: can get namespace from binding
• e430fc1 Simplify lookupBindings()
• 229fa94 Simplify toBinding()
• 81d0fdf Split main.go into parse.go, render.go and types.go
• 8c58069 Store ClusterRoleBindings only in RoleBindings[""]
• d6cf606 Store ClusterRoles in Roles[""]
• 3cb893d Store permissions in Rback struct so we don't need to pass them around
• be75699 Store permissions in map[name]json instead of arrays
• 53f3314 Support showing graph for a specific ClusterRole
• e8e69e2 Support showing graph for a specific ClusterRoleBinding
• 90f4f1d Support showing graph for a specific Role
• 6875c6e Support showing graph for a specific RoleBinding
• b88cd3e Support specifying multiple ServiceAccounts
• 3a15405 Support specifying multiple namespaces
• 67eac80 Update "How it works" in README.md
• cf69b70 Updated README.md with new features
• 9453ab5 Use bold font in highlighted nodes
• 150e631 Use getNamespacedName() everywhere where possible
• bd0ffa5 When focusing on (Cluster)Roles, also draw orphaned (Cluster)Roles
• 22a543c When focusing on CRs, don't show RoleBindings that refer to missing ones
• ed76f90 When focusing on Roles, don't show RoleBindings that refer to missing ones
• 39d4e05 When focusing on Roles, don't show bindings that point to ClusterRoles
• ebef0a9 adds Katacoda playground output
• d723fc0 adds legend
• 94a6590 adds support for roles in resource lookups
• e60d045 completes MVP
• 5b93f4d completes v0.1.0 release
• d012da7 expands on background
• fc7b0d4 feat: modernize project and adopt fork under @tmojzes
• b4f85c3 fix panic in parse logic
• 8fce272 fix(ci): use go-task/setup-task@v2 in GitHub Actions workflow
• 4257615 fixes docs
• 0bb7034 fixes regression (now again MVP-level)
• 8287c13 fixes release version in build
• 6dcd853 fixes rendering in terms of scope
• ec465e3 improves RnB
• fb72fd1 improves generation speed 10x
• 162657f improves query and rendering
• 0ac4859 improves rendering
• 21b894d improves resource lookups
• edd7bb7 improves resource rendering
• 0f2e9aa inits codebase
• 74ebd8b inits release
• e1abc2d introduces rough flow
• d03fde1 releases v0.3.0
• e9226dc releases version 0.2.0
• 5b2c867 this is the v0.4.0 release
• 0e34c41 updates EKS example to v0.3.0 output
• 943fc17 updates docs
• 25bea66 updates docs
• 7937f37 updates docs
• 2e8229d updates docs
• 1632324 updates example