get_cluster_role_bindings
Fetch ClusterRoleBindings and optionally RoleBindings for RBAC analysis. Returns binding name, roleRef (ClusterRole/Role name), and subjects (ServiceAccounts, Users, Groups). Use this to diagnose permission-denied errors - it shows WHO has WHAT permissions. Unlike describe_resource, this can LIST all bindings without knowing names upfront.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| namespace | No | If provided, also fetch namespace-scoped RoleBindings here. | |
| cluster_id | Yes | Ankra cluster id (UUID) the call targets. Discover ids with list_clusters. | |
| subject_name | No | Filter to bindings referencing this subject (e.g. service account name). |