Kubetier
T0cluster-admincluster

Full unrestricted access to every resource in the cluster.

The Kubernetes equivalent of root.

  • Auto-reconciled: any modification or deletion is reverted on the next API server restart.

  • Audit all ClusterRoleBindings to this role; each one is effectively cluster root.

  • Membership in the system:masters group also bypasses RBAC entirely and grants equivalent access without any binding.

Permissions (2)
apiGroupresources / urlsverbs
***
(non-resource)**
Audit: RequestResponseK8s docs ↗