Where can I get a list of Kubernetes API resources and subresources?

Question

I am trying to configure Kubernetes RBAC in the least-permissive way possible and I want to scope my roles to specific resources and subresouces. I\'ve dug through the doc

Answer 1

Another option, especially for those who don't have immediate access to a live k8s, is the OpenAPI spec.
From the api reference, you can reach the latest docs which has a link, at the top right, to the git managed OpenAPI spec which you can load at the Swagger live web editor.
Endpoints like /api/v1/namespaces/{namespace}/pods/{name}/log will be listed there.

Placed all these links in an attempt to future-proof this answer. I couldn't find a /latest type URL that'll point to the latest version.

Answer 2

I wrote a tiny Go utility for this exact purpose. Generates a complete RBAC role with every possible resource & sub-resource on the cluster. You can then prune that back to fit your role's use case.

https://github.com/coopernetes/kube-role-gen