kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: {{ template "kyverno.name" . }}-cleanup-jobs
  labels:
    {{- include "kyverno.labels.merge" (list (include "kyverno.labels.common" .) (include "kyverno.matchLabels.common" .)) | nindent 4 }}
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: {{ template "kyverno.name" . }}-cleanup-jobs
subjects:
  - kind: ServiceAccount
    name: {{ template "kyverno.name" . }}-cleanup-jobs
    namespace: {{ template "kyverno.namespace" . }}
