apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: dnsmasq-controller roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: dnsmasq-controller subjects: - kind: ServiceAccount name: dnsmasq-controller namespace: default