# --- # ---
# # kind: ClusterRole
# # apiVersion: rbac.authorization.k8s.io/v1
# # metadata:
# #   name: bob-permissive-role
# # rules:
# #   - apiGroups:
# #       - extensions
# #     resources:
# #       - podsecuritypolicies
# #     resourceNames:
# #       - permissive
# #     verbs:
# #       - use
# apiVersion: rbac.authorization.k8s.io/v1
# kind: ClusterRole
# metadata:
#   # "namespace" omitted since ClusterRoles are not namespaced
#   name: bob-permissive-role
# rules:
#   - apiGroups: [""]
#     resources: ["deployments"]
#     verbs: ["get", "list", "watch", "create", "update", "patch", "delete"]
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: admin-bob
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: admin
subjects:
  - kind: ServiceAccount
    name: bob
    namespace: default
