Kubernetes · Security & Access

Kubernetes Namespace RBAC

RoleBinding granting a namespaced Role to an application ServiceAccount. This diagram is written in ArchLex and passes Kubernetes provider checks.

Edit in the playground Kubernetes diagrams as code

Kubernetes Namespace RBAC: RoleBinding granting a namespaced Role to an application ServiceAccount

Kubernetes Namespace RBAC: RoleBinding granting a namespaced Role to an application ServiceAccount

provider k8s
direction LR
validation normal

cluster production {
  namespace application {
    app_identity: serviceaccount
    config_reader: role
    access_grant: rolebinding

    access_grant -[authorizes]->|grants role| config_reader
    access_grant -[authorizes]->|grants to| app_identity
  }
}

What is in this diagram.

Resources

app_identity ServiceAccount
config_reader Role
access_grant RoleBinding

Relationships

access_grant authorizes config_reader
access_grant authorizes app_identity

Boundaries

cluster production
namespace application

Render it yourself.

Save the source as k8s-namespace-rbac.arch and render it with the CLI, or ask your agent to adapt it through the ArchLex MCP server.

npx @archlex/cli render k8s-namespace-rbac.arch --output k8s-namespace-rbac.svg