apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
    name: cluster-admin-bob
roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    name: admin
subjects:
    -   kind: ServiceAccount
        name: bob
        namespace: default
