cartography 0.104.0rc2__py3-none-any.whl → 0.123.0__py3-none-any.whl

cartography/models/kubernetes/containers.py

@@ -0,0 +1,133 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KubernetesContainerNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("uid")
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    image: PropertyRef = PropertyRef("image", extra_index=True)
+    namespace: PropertyRef = PropertyRef("namespace", extra_index=True)
+    cluster_name: PropertyRef = PropertyRef(
+        "CLUSTER_NAME", set_in_kwargs=True, extra_index=True
+    )
+    image_pull_policy: PropertyRef = PropertyRef("image_pull_policy")
+    status_image_id: PropertyRef = PropertyRef("status_image_id")
+    status_image_sha: PropertyRef = PropertyRef("status_image_sha", extra_index=True)
+    status_ready: PropertyRef = PropertyRef("status_ready")
+    status_started: PropertyRef = PropertyRef("status_started")
+    status_state: PropertyRef = PropertyRef("status_state")
+    memory_request: PropertyRef = PropertyRef("memory_request")
+    cpu_request: PropertyRef = PropertyRef("cpu_request")
+    memory_limit: PropertyRef = PropertyRef("memory_limit")
+    cpu_limit: PropertyRef = PropertyRef("cpu_limit")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesContainerToKubernetesNamespaceRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesContainerToKubernetesPodRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KubernetesContainer)<-[:CONTAINS]-(:KubernetesNamespace)
+class KubernetesContainerToKubernetesNamespaceRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesNamespace"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "cluster_name": PropertyRef("CLUSTER_NAME", set_in_kwargs=True),
+            "name": PropertyRef("namespace"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "CONTAINS"
+    properties: KubernetesContainerToKubernetesNamespaceRelProperties = (
+        KubernetesContainerToKubernetesNamespaceRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+# (:KubernetesContainer)<-[:CONTAINS]-(:KubernetesPod)
+class KubernetesContainerToKubernetesPodRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesPod"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "cluster_name": PropertyRef("CLUSTER_NAME", set_in_kwargs=True),
+            "namespace": PropertyRef("namespace"),
+            "id": PropertyRef("pod_id"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "CONTAINS"
+    properties: KubernetesContainerToKubernetesPodRelProperties = (
+        KubernetesContainerToKubernetesPodRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesContainerToKubernetesClusterRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KubernetesContainer)<-[:RESOURCE]-(:KubernetesCluster)
+class KubernetesContainerToKubernetesClusterRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesCluster"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("CLUSTER_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KubernetesContainerToKubernetesClusterRelProperties = (
+        KubernetesContainerToKubernetesClusterRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesContainerToECRImageRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesContainerToECRImageRel(CartographyRelSchema):
+    target_node_label: str = "ECRImage"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"digest": PropertyRef("status_image_sha")}
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "HAS_IMAGE"
+    properties: KubernetesContainerToECRImageRelProperties = (
+        KubernetesContainerToECRImageRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesContainerSchema(CartographyNodeSchema):
+    label: str = "KubernetesContainer"
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["Container"])
+    properties: KubernetesContainerNodeProperties = KubernetesContainerNodeProperties()
+    sub_resource_relationship: KubernetesContainerToKubernetesClusterRel = (
+        KubernetesContainerToKubernetesClusterRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            KubernetesContainerToKubernetesNamespaceRel(),
+            KubernetesContainerToKubernetesPodRel(),
+            KubernetesContainerToECRImageRel(),
+        ]
+    )

cartography/models/kubernetes/groups.py

@@ -0,0 +1,107 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KubernetesGroupNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    cluster_name: PropertyRef = PropertyRef("cluster_name")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesGroupToClusterRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesGroupToClusterRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesCluster"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("CLUSTER_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KubernetesGroupToClusterRelProperties = (
+        KubernetesGroupToClusterRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesGroupToOktaGroupRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesGroupToAWSRoleRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesGroupToAWSUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesGroupToOktaGroupRel(CartographyRelSchema):
+    target_node_label: str = "OktaGroup"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("name")}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "MAPS_TO"
+    properties: KubernetesGroupToOktaGroupRelProperties = (
+        KubernetesGroupToOktaGroupRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesGroupToAWSRoleRel(CartographyRelSchema):
+    target_node_label: str = "AWSRole"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"arn": PropertyRef("aws_role_arn")}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "MAPS_TO"
+    properties: KubernetesGroupToAWSRoleRelProperties = (
+        KubernetesGroupToAWSRoleRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesGroupToAWSUserRel(CartographyRelSchema):
+    target_node_label: str = "AWSUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"arn": PropertyRef("aws_user_arn")}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "MAPS_TO"
+    properties: KubernetesGroupToAWSUserRelProperties = (
+        KubernetesGroupToAWSUserRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesGroupSchema(CartographyNodeSchema):
+    label: str = "KubernetesGroup"
+    properties: KubernetesGroupNodeProperties = KubernetesGroupNodeProperties()
+    sub_resource_relationship: KubernetesGroupToClusterRel = (
+        KubernetesGroupToClusterRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            KubernetesGroupToOktaGroupRel(),
+            KubernetesGroupToAWSRoleRel(),
+            KubernetesGroupToAWSUserRel(),
+        ]
+    )

cartography/models/kubernetes/namespaces.py

@@ -0,0 +1,51 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KubernetesNamespaceNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("uid")
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    creation_timestamp: PropertyRef = PropertyRef("creation_timestamp")
+    deletion_timestamp: PropertyRef = PropertyRef("deletion_timestamp")
+    status_phase: PropertyRef = PropertyRef("status_phase")
+    cluster_name: PropertyRef = PropertyRef(
+        "cluster_name", set_in_kwargs=True, extra_index=True
+    )
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesNamespaceToKubernetesClusterRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KubernetesNamespace)<-[:RESOURCE]-(:KubernetesCluster)
+class KubernetesNamespaceToKubernetesClusterRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesCluster"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("CLUSTER_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KubernetesNamespaceToKubernetesClusterRelProperties = (
+        KubernetesNamespaceToKubernetesClusterRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesNamespaceSchema(CartographyNodeSchema):
+    label: str = "KubernetesNamespace"
+    properties: KubernetesNamespaceNodeProperties = KubernetesNamespaceNodeProperties()
+    sub_resource_relationship: KubernetesNamespaceToKubernetesClusterRel = (
+        KubernetesNamespaceToKubernetesClusterRel()
+    )

cartography/models/kubernetes/oidc.py

@@ -0,0 +1,51 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KubernetesOIDCProviderNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    issuer_url: PropertyRef = PropertyRef("issuer_url")
+    cluster_name: PropertyRef = PropertyRef("cluster_name")
+    k8s_platform: PropertyRef = PropertyRef("k8s_platform")
+    client_id: PropertyRef = PropertyRef("client_id")
+    status: PropertyRef = PropertyRef("status")
+    name: PropertyRef = PropertyRef("name")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesOIDCProviderToClusterRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesOIDCProviderToClusterRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesCluster"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("CLUSTER_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "TRUSTS"
+    properties: KubernetesOIDCProviderToClusterRelProperties = (
+        KubernetesOIDCProviderToClusterRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesOIDCProviderSchema(CartographyNodeSchema):
+    label: str = "KubernetesOIDCProvider"
+    properties: KubernetesOIDCProviderNodeProperties = (
+        KubernetesOIDCProviderNodeProperties()
+    )
+    sub_resource_relationship: KubernetesOIDCProviderToClusterRel = (
+        KubernetesOIDCProviderToClusterRel()
+    )

cartography/models/kubernetes/pods.py

@@ -0,0 +1,80 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KubernetesPodNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("uid")
+    name: PropertyRef = PropertyRef("name", extra_index=True)
+    status_phase: PropertyRef = PropertyRef("status_phase")
+    creation_timestamp: PropertyRef = PropertyRef("creation_timestamp")
+    deletion_timestamp: PropertyRef = PropertyRef("deletion_timestamp")
+    namespace: PropertyRef = PropertyRef("namespace", extra_index=True)
+    labels: PropertyRef = PropertyRef("labels")
+    cluster_name: PropertyRef = PropertyRef(
+        "CLUSTER_NAME", set_in_kwargs=True, extra_index=True
+    )
+    node: PropertyRef = PropertyRef("node")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesPodToKubernetesNamespaceRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KubernetesPod)<-[:CONTAINS]-(:KubernetesNamespace)
+class KubernetesPodToKubernetesNamespaceRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesNamespace"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "cluster_name": PropertyRef("CLUSTER_NAME", set_in_kwargs=True),
+            "name": PropertyRef("namespace"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "CONTAINS"
+    properties: KubernetesPodToKubernetesNamespaceRelProperties = (
+        KubernetesPodToKubernetesNamespaceRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesPodToKubernetesClusterRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KubernetesPod)<-[:RESOURCE]-(:KubernetesCluster)
+class KubernetesPodToKubernetesClusterRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesCluster"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("CLUSTER_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KubernetesPodToKubernetesClusterRelProperties = (
+        KubernetesPodToKubernetesClusterRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesPodSchema(CartographyNodeSchema):
+    label: str = "KubernetesPod"
+    properties: KubernetesPodNodeProperties = KubernetesPodNodeProperties()
+    sub_resource_relationship: KubernetesPodToKubernetesClusterRel = (
+        KubernetesPodToKubernetesClusterRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [KubernetesPodToKubernetesNamespaceRel()]
+    )

cartography/models/kubernetes/rolebindings.py

@@ -0,0 +1,159 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KubernetesRoleBindingNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    namespace: PropertyRef = PropertyRef("namespace")
+    uid: PropertyRef = PropertyRef("uid")
+    creation_timestamp: PropertyRef = PropertyRef("creation_timestamp")
+    resource_version: PropertyRef = PropertyRef("resource_version")
+    role_name: PropertyRef = PropertyRef("role_name")
+    role_kind: PropertyRef = PropertyRef("role_kind")
+    service_account_ids: PropertyRef = PropertyRef("service_account_ids")
+    user_ids: PropertyRef = PropertyRef("user_ids")
+    group_ids: PropertyRef = PropertyRef("group_ids")
+    role_id: PropertyRef = PropertyRef("role_id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesRoleBindingToNamespaceRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesRoleBindingToNamespaceRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesNamespace"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "cluster_name": PropertyRef("CLUSTER_NAME", set_in_kwargs=True),
+            "name": PropertyRef("namespace"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "CONTAINS"
+    properties: KubernetesRoleBindingToNamespaceRelProperties = (
+        KubernetesRoleBindingToNamespaceRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesRoleBindingToClusterRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesRoleBindingToClusterRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesCluster"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("CLUSTER_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KubernetesRoleBindingToClusterRelProperties = (
+        KubernetesRoleBindingToClusterRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesRoleBindingToServiceAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesRoleBindingToServiceAccountRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesServiceAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("service_account_ids", one_to_many=True)}
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "SUBJECT"
+    properties: KubernetesRoleBindingToServiceAccountRelProperties = (
+        KubernetesRoleBindingToServiceAccountRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesRoleBindingToUserRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesRoleBindingToUserRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("user_ids", one_to_many=True)}
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "SUBJECT"
+    properties: KubernetesRoleBindingToUserRelProperties = (
+        KubernetesRoleBindingToUserRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesRoleBindingToGroupRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesRoleBindingToGroupRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesGroup"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("group_ids", one_to_many=True)}
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "SUBJECT"
+    properties: KubernetesRoleBindingToGroupRelProperties = (
+        KubernetesRoleBindingToGroupRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesRoleBindingToRoleRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesRoleBindingToRoleRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesRole"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("role_id")}
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "ROLE_REF"
+    properties: KubernetesRoleBindingToRoleRelProperties = (
+        KubernetesRoleBindingToRoleRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesRoleBindingSchema(CartographyNodeSchema):
+    label: str = "KubernetesRoleBinding"
+    properties: KubernetesRoleBindingNodeProperties = (
+        KubernetesRoleBindingNodeProperties()
+    )
+    sub_resource_relationship: KubernetesRoleBindingToClusterRel = (
+        KubernetesRoleBindingToClusterRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            KubernetesRoleBindingToNamespaceRel(),
+            KubernetesRoleBindingToServiceAccountRel(),
+            KubernetesRoleBindingToUserRel(),
+            KubernetesRoleBindingToGroupRel(),
+            KubernetesRoleBindingToRoleRel(),
+        ]
+    )

cartography/models/kubernetes/roles.py

@@ -0,0 +1,76 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KubernetesRoleNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    name: PropertyRef = PropertyRef("name")
+    namespace: PropertyRef = PropertyRef("namespace")
+    uid: PropertyRef = PropertyRef("uid")
+    creation_timestamp: PropertyRef = PropertyRef("creation_timestamp")
+    resource_version: PropertyRef = PropertyRef("resource_version")
+    api_groups: PropertyRef = PropertyRef("api_groups")
+    resources: PropertyRef = PropertyRef("resources")
+    verbs: PropertyRef = PropertyRef("verbs")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesRoleToNamespaceRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesRoleToNamespaceRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesNamespace"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "cluster_name": PropertyRef("CLUSTER_NAME", set_in_kwargs=True),
+            "name": PropertyRef("namespace"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "CONTAINS"
+    properties: KubernetesRoleToNamespaceRelProperties = (
+        KubernetesRoleToNamespaceRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesRoleToClusterRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KubernetesRoleToClusterRel(CartographyRelSchema):
+    target_node_label: str = "KubernetesCluster"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("CLUSTER_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KubernetesRoleToClusterRelProperties = (
+        KubernetesRoleToClusterRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KubernetesRoleSchema(CartographyNodeSchema):
+    label: str = "KubernetesRole"
+    properties: KubernetesRoleNodeProperties = KubernetesRoleNodeProperties()
+    sub_resource_relationship: KubernetesRoleToClusterRel = KubernetesRoleToClusterRel()
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            KubernetesRoleToNamespaceRel(),
+        ]
+    )