apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: warehouse-cluster-reconciler roleRef: name: cluster-admin kind: ClusterRole apiGroup: rbac.authorization.k8s.io subjects: - name: lumperctl namespace: warehouse-system kind: ServiceAccount