--- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: labels: app: webhook app.kubernetes.io/component: webhook app.kubernetes.io/instance: cert-manager app.kubernetes.io/name: webhook app.kubernetes.io/version: v1.14.5 name: cert-manager-webhook:subjectaccessreviews rules: - apiGroups: - authorization.k8s.io resources: - subjectaccessreviews verbs: - create