apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: registry-aliases-crb subjects: - kind: ServiceAccount name: registry-aliases-sa namespace: kube-system roleRef: kind: ClusterRole name: cluster-admin apiGroup: rbac.authorization.k8s.io