apiVersion: rbac.authorization.k8s.io/v1 kind: RoleBinding metadata: namespace: default name: tailscale subjects: - kind: ServiceAccount name: tailscale roleRef: kind: Role name: tailscale apiGroup: rbac.authorization.k8s.io