apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
    labels:
        app.kubernetes.io/instance: kuma
        app.kubernetes.io/name: kuma
    name: kuma-control-plane
roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    name: kuma-control-plane
subjects:
    - kind: ServiceAccount
      name: kuma-control-plane
      namespace: kuma-system
