apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: name: crossplane-provider-kubernetes-admin rules: - apiGroups: - "" resources: - namespaces verbs: - get - list - watch - create - delete - patch - update - apiGroups: - "*" resources: - "*" verbs: - "*" --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: crossplane-provider-kubernetes-admin-binding subjects: - kind: ServiceAccount name: provider-kubernetes-71953a1e5c15 namespace: crossplane-system roleRef: kind: ClusterRole name: crossplane-provider-kubernetes-admin apiGroup: rbac.authorization.k8s.io