apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: << resource_name >>
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: << role_kind >>
  name: << role_name >>
subjects:
  - kind: << subject_kind >>
    name: << subject_name >>
<%- if subject_kind == "ServiceAccount" and subject_namespace %>
    namespace: << subject_namespace >>
<%- endif %>