1apiVersion: rbac.authorization.k8s.io/v1 2kind: ClusterRole 3metadata: 4 name: proxy-role 5rules: 6- apiGroups: ["authentication.k8s.io"] 7 resources: 8 - tokenreviews 9 verbs: ["create"] 10- apiGroups: ["authorization.k8s.io"] 11 resources: 12 - subjectaccessreviews 13 verbs: ["create"]