Kubernetes RBAC Visualizer

How it works

Manifests are parsed client-side with the js-yaml library's loadAll(), so multiple ----separated documents in one paste all get read, then each RoleBinding or ClusterRoleBinding is matched to a Role or ClusterRole by comparing its roleRef kind and name against the parsed roles. Verbs like get/list/watch are grouped into plain-English categories — read, create, modify, delete — and a bare * verb is called out as "do anything."

FAQ

What happens if I paste a RoleBinding but leave out the Role it references?

It still shows the binding, but flags it with a warning that the referenced Role or ClusterRole couldn't be found among the pasted manifests, rather than guessing at permissions it can't see.

Does it check against a real, live Kubernetes cluster?

No — it only interprets the YAML you paste in and has no connection to any cluster's API server, so it can't see roles or bindings that exist live but weren't included in the paste.