text: apiVersion: v1
  kind: ServiceAccount
  metadata:
    name: kurl-join
  ---
  apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    name: kurl-join-kube-system
  rules:
  - apiGroups:
    - ""
    resources:
    - configmaps
    verbs:
    - get
    - update
  - apiGroups:
    - ""
    resources:
    - secrets
    verbs:
    - get
    - create
    - update
  - apiGroups:
    - "rbac.authorization.k8s.io"
    resources:
    - roles
    - rolebindings
    verbs:
    - create
    - update
  ---
  apiVersion: rbac.authorization.k8s.io/v1
  kind: RoleBinding
  metadata:
    name: kurl-join
    namespace: kube-system
  subjects:
  - kind: ServiceAccount
    name: kurl-join
    namespace: default
  roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    name: kurl-join-kube-system
  