monedula-acl-rbac mds list-bindings

Read-only inventory of existing role bindings in MDS. Usage and flags for monedula-acl-rbac mds list-bindings.

Reference 18 of 29

Reference for monedula-acl-rbac-converter v0.10.0

Updated 2 October 2026

usage

monedula-acl-rbac mds list-bindings [flags]

Read-only: this command does not change the cluster.

Flags

Flag	Type	Default	Description
`--principal-filter`	stringSlice		Principal filter, repeatable (required: MDS has no all-principals lookup)
`--scope-filter`	stringSlice		Scope filter (repeatable)
`--kafka-cluster`	string		Kafka cluster ID for the lookup scope
`--schema-registry-cluster`	string		Schema Registry cluster ID for the lookup scope
`--ksql-cluster`	string		ksqlDB cluster ID for the lookup scope
`--connect-cluster`	string		Connect cluster ID for the lookup scope
`--format`	string	`text`	text\|json\|yaml
`--mds-url`	string		MDS base URL (required)
`--mds-ca-cert`	string		Path to a PEM CA bundle for MDS TLS
`--mds-client-cert`	string		Path to a PEM client certificate for mTLS to MDS
`--mds-client-key`	string		Path to a PEM client key for mTLS to MDS
`--mds-insecure-skip-verify`	bool		Skip TLS certificate verification
`--mds-user`	string		MDS username
`--mds-password-file`	string		Path to a file containing the MDS password
`--mds-token-file`	string		Path to a pre-fetched MDS bearer token file
`--cache-token`	bool		Persist the resolved token to the user config dir
`--mds-max-retries`	int	`3`	Retry transient MDS failures (5xx, 429, connection reset) up to N additional times after the initial call; pass 0 to disable retries

Flag	Type	Default	Description
`--log-format`	string	`text`	Log output format (text\|json); set MONEDULA_ACL_RBAC_LOG_FORMAT to override the default.
`--log-level`	string	`info`	Log level (debug\|info\|warn\|error); set MONEDULA_ACL_RBAC_LOG_LEVEL to override the default.

examples

monedula-acl-rbac mds list-bindings --mds-url https://mds.example.com --principal-filter User:alice

Code	Meaning
`0`	Success.
`1`	Usage error: missing required flag, malformed argument, or unknown subcommand.
`4`	External system error: MDS unreachable or unauthorized, Kafka unreachable or auth failure, or the Kubernetes API unreachable, unauthorized, or RBAC denied.