 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: cb-core-psp-restricted
   namespace: cloudbees-core
 roleRef:
   apiGroup: rbac.authorization.k8s.io
   kind: ClusterRole
   name: psp-restricted-clusterrole
 subjects:
 # All service accounts in ingress-nginx namespace
 - apiGroup: rbac.authorization.k8s.io
   kind: Group
   name: system:serviceaccounts
