apiVersion: v1 kind: ServiceAccount metadata: name: headlamp-admin namespace: headlamp annotations: argocd.argoproj.io/sync-wave: "1" --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: name: headlamp-admin annotations: argocd.argoproj.io/sync-wave: "1" roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole name: cluster-admin subjects: - kind: ServiceAccount name: headlamp-admin namespace: headlamp