rb.yaml

rb.yaml

---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: RoleBinding
metadata:
  name: psp-kube-system
  namespace: kube-system
subjects:
- kind: Group
  name: system:serviceaccounts
  # allows kubelet to communicate mirror pods to the API server.
  # if not set, mirror pods will fail and static pods that restart may not show up 
  # when listing pods. See https://github.com/kubernetes/kubernetes/issues/70952.
- kind: Group
  name: system:nodes
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: psp-kube-system