1# This patch inject a sidecar container which is a HTTP proxy for the 2# controller manager, it performs RBAC authorization against the Kubernetes API using SubjectAccessReviews. 3apiVersion: apps/v1 4kind: Deployment 5metadata: 6 name: controller-manager 7 namespace: system 8spec: 9 template: 10 spec: 11 containers: 12 - name: dud:latest