ClusterRole and ClusterRoleBinding YAML Generator

A ClusterRole grants permissions across the entire cluster and a ClusterRoleBinding attaches it to subjects. The ClusterRole and ClusterRoleBinding YAML Generator writes both documents in one file so you do not have to recall the rbac.authorization.k8s.io/v1 schema.

You set the ClusterRole name, then list one or more rules, one per line as apiGroups|resources|verbs (empty apiGroup = core). You then set the ClusterRoleBinding name and subjects, one per line as kind|name|namespace, where kind is User, Group or ServiceAccount. The tool wires up the roleRef automatically. Because these are cluster-scoped, there is no namespace on the resources themselves. The resulting YAML is valid rbac.authorization.k8s.io/v1.

Names are validated as RFC 1123 labels, at least one rule and one subject are required, and each rule needs resources and verbs. Problems are reported in a clear panel. Everything runs locally and nothing is uploaded.

• ClusterRole - name and label-based permissions, no namespace.
• Rules - one per line as apiGroups|resources|verbs.
• ClusterRoleBinding - name and roleRef wired to the ClusterRole.
• Subjects - one per line as kind|name|namespace.
• rbac.authorization.k8s.io/v1 - correct schema.
• Validation - RFC 1123 names, rules and subjects.
• Copy / Download / Print - get clusterrole-clusterrolebinding.yaml wherever you need it.

1. Name the ClusterRole. Type a valid RFC 1123 name.
2. Add rules. One per line: apiGroups|resources|verbs.
3. Set the binding name and subjects. kind|name|namespace per line.
4. Watch the preview and export.

Example 1 - nodes read. rule ""|nodes|get,list,watch.

Example 2 - storage. rule storage.k8s.io|persistentvolumes|get,list.

Example 3 - service accounts. Subject ServiceAccount|reader|default.

Example 4 - user. Subject User|admin|.

Example 5 - group. Subject Group|cluster-admins|.

• Correct schema - valid rbac.authorization.k8s.io/v1 ClusterRole + ClusterRoleBinding.
• Cluster scope - no namespace on the resources.
• Line-based rules - easy multi-rule input.
• Validated - names, rules and subjects checked.
• Private - everything runs in the browser.
• Copy, download or print - get the manifest where you need it.