kind: RoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
    name: 'gce:podsecuritypolicy:calico-sa'
    namespace: kube-system
    selfLink: >-
        /apis/rbac.authorization.k8s.io/v1/namespaces/kube-system/rolebindings/gce:podsecuritypolicy:calico-sa
    uid: c733ca80-3d3e-11ea-96d3-42010a80017a
    resourceVersion: '223929651'
    creationTimestamp: '2020-01-22T17:44:02Z'
    labels:
        addonmanager.kubernetes.io/mode: Reconcile
        kubernetes.io/cluster-service: 'true'
    annotations:
        components.gke.io/component-name: networkpolicy-calico
        components.gke.io/component-version: 1.0.12
        kubectl.kubernetes.io/last-applied-configuration: >
            {"apiVersion":"rbac.authorization.k8s.io/v1","kind":"RoleBinding","metadata":{"annotations":{"components.gke.io/component-name":"networkpolicy-calico","components.gke.io/component-version":"1.0.12"},"labels":{"addonmanager.kubernetes.io/mode":"Reconcile","kubernetes.io/cluster-service":"true"},"name":"gce:podsecuritypolicy:calico-sa","namespace":"kube-system"},"roleRef":{"apiGroup":"rbac.authorization.k8s.io","kind":"ClusterRole","name":"gce:podsecuritypolicy:privileged"},"subjects":[{"kind":"ServiceAccount","name":"calico-sa","namespace":"kube-system"}]}
subjects:
    -
        kind: ServiceAccount
        name: calico-sa
        namespace: kube-system
roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    name: 'gce:podsecuritypolicy:privileged'

