apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admission-webhook-cluster-role-binding
  labels:
    app: admission-webhook
    app.kubernetes.io/component: poddefaults
    app.kubernetes.io/name: poddefaults
    kustomize.component: admission-webhook
roleRef:
  name: admission-webhook-cluster-role
  kind: ClusterRole
  apiGroup: rbac.authorization.k8s.io
subjects:
- name: admission-webhook-service-account
  namespace: kubeflow
  kind: ServiceAccount
