apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: controller-rolebinding roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: controller-role subjects: - kind: ServiceAccount name: controller namespace: system --- apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: name: controller-rolebinding roleRef: apiGroup: rbac.authorization.k8s.io kind: Role name: controller-role subjects: - kind: ServiceAccount name: controller namespace: system