1kind: ClusterRoleBinding 2apiVersion: rbac.authorization.k8s.io/v1 3metadata: 4 name: calico-cpva 5 labels: 6 addonmanager.kubernetes.io/mode: Reconcile 7subjects: 8 - kind: ServiceAccount 9 name: calico-cpva 10 namespace: kube-system 11roleRef: 12 kind: ClusterRole 13 name: calico-cpva 14 apiGroup: rbac.authorization.k8s.io