apiVersion: rbac.authorization.k8s.io/v1beta1 kind: ClusterRoleBinding metadata: name: apiserver-node-proxy labels: kubernetes.io/cluster-service: "true" addonmanager.kubernetes.io/mode: Reconcile roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: node-proxy subjects: - apiGroup: rbac.authorization.k8s.io kind: User name: kube-apiserver