RBAC & Permissions

Compiled from the RBAC reference: each resource maps to the verbs (permissions) a Role/ClusterRole must grant. Directly answers “what permissions does this manifest require?”

Roles / permissions (16)

• pods group=core
  get, list, watch, create, update, patch, delete
• services group=core
  get, list, watch, create, update, patch, delete
• deployments group=apps
  get, list, watch, create, update, patch, delete
• replicasets group=apps
  get, list, watch, create, update, patch, delete
• statefulsets group=apps
  get, list, watch, create, update, patch, delete
• daemonsets group=apps
  get, list, watch, create, update, patch, delete
• configmaps group=core
  get, list, watch, create, update, patch, delete
• secrets group=core
  get, list, watch, create, update, patch, delete
• namespaces group=core
  get, list, watch, create, delete
• nodes group=core
  get, list, watch, create, update, patch, delete, cordondrain
• roles group=rbac.authorization.k8s.io
  get, list, watch, create, update, patch, delete, bind
• rolebindings group=rbac.authorization.k8s.io
  get, list, watch, create, update, patch, delete, bind
• clusterroles group=rbac.authorization.k8s.io
  get, list, watch, create, update, patch, delete, bind
• clusterrolebindings group=rbac.authorization.k8s.io
  get, list, watch, create, update, patch, delete, bind
• ingresses group=networking.k8s.io
  get, list, watch, create, update, patch, delete
• customresourcedefinitions group=apiextensions.k8s.io
  get, list, watch, create, update, patch, delete

Manifest → required permission edges (15)

A sample of the compiled requires edges: