apiVersion: v1 kind: ServiceAccount metadata: name: vmctl labels: app.kubernetes.io/instance: vmctl-serviceaccount app.kubernetes.io/name: vmctl --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: vmctl labels: app.kubernetes.io/instance: vmctl-clusterrolebinding app.kubernetes.io/name: vmctl roleRef: name: vmctl kind: ClusterRole apiGroup: rbac.authorization.k8s.io subjects: - name: vmctl namespace: vmctl kind: ServiceAccount