Lineage
read-only · v1.0
static mock demo — no cluster connection, no oc, no credentials
Static mock demo. This page uses a small bundled sample dataset. It does not connect to a cluster, run oc, or read local credentials.
Privileged ClusterRoles Roles Role grants Cross-namespace Who can Aggregated

Who can

Reverse RBAC lookup from Lineage's cached read-only inventory. This does not shell out to oc adm policy who-can; Lineage expands real Groups into member users and flags ghosts, baseline, and unclassified rows.

Results: list on secrets in payments-prod

Yours 9 Unclassified 0 Baseline 1 All 10
· All subjects 9 Users 5 Groups 2 SAs 2
· All paths 9 Direct 5 Via group 4 Ghosts 3

9 rows shown (10 total)

SubjectPathBindingScope
Group platform-admins direct ClusterRoleBinding/platform-admins-cluster-admin cluster-wide
User alice via Group platform-admins ClusterRoleBinding/platform-admins-cluster-admin cluster-wide
User future-hire@company.com ghost direct ClusterRoleBinding/ghost-future-employee cluster-wide
ServiceAccount pipeline (ci) ghost direct ClusterRoleBinding/ci-pipeline-clusteradmin cluster-wide
ServiceAccount runner (legacy-pipelines) ghost direct ClusterRoleBinding/legacy-runner-admin cluster-wide
Group engineers direct RoleBinding/secret-readers (payments-prod) payments-prod
User alice via Group engineers RoleBinding/secret-readers (payments-prod) payments-prod
User eve via Group engineers RoleBinding/secret-readers (payments-prod) payments-prod
User nina-onboarding via Group engineers RoleBinding/secret-readers (payments-prod) payments-prod