apiVersion: v1
items:
- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRole
  metadata:
    labels:
      test-cmd: auth
    name: testing-CR
  rules:
  - apiGroups:
    - ""
    resources:
    - pods
    verbs:
    - create
    - delete
    - deletecollection
    - get
    - list
    - patch
    - update
    - watch

- apiVersion: v1
  kind: Pod
  metadata:
    name: valid-pod
    labels:
      name: valid-pod
  spec:
    containers:
    - name: kubernetes-serve-hostname
      image: gcr.io/kubernetes-e2e-test-images/serve-hostname:1.1
      resources:
        limits:
          cpu: "1"
          memory: 512Mi

- apiVersion: rbac.authorization.k8s.io/v1
  kind: ClusterRoleBinding
  metadata:
    labels:
      test-cmd: auth
    name: testing-CRB
  roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    name: testing-CR
  subjects:
  - apiGroup: rbac.authorization.k8s.io
    kind: Group
    name: system:masters

- apiVersion: rbac.authorization.k8s.io/v1
  kind: RoleBinding
  metadata:
    labels:
      test-cmd: auth
    name: testing-RB
    namespace: some-other-random
  roleRef:
    apiGroup: rbac.authorization.k8s.io
    kind: ClusterRole
    name: testing-CR
  subjects:
  - apiGroup: rbac.authorization.k8s.io
    kind: Group
    name: system:masters

- apiVersion: rbac.authorization.k8s.io/v1
  kind: Role
  metadata:
    labels:
      test-cmd: auth
    name: testing-R
    namespace: some-other-random
  rules:
  - apiGroups:
    - ""
    resources:
    - configmaps
    verbs:
    - get
    - list
    - watch

kind: List
metadata: {}