apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: labels: app.kubernetes.io/component: storage app.kubernetes.io/managed-by: cdi-operator cdi.kubevirt.io: "" name: cdi-apiserver roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: cdi-apiserver subjects: - kind: ServiceAccount name: cdi-apiserver namespace: "{{ namespace }}"