{
  apiVersion = "rbac.authorization.k8s.io/v1";
  kind = "ClusterRoleBinding";
  metadata = {
    labels = {
      app = "istiod";
      release = "istio-istiod";
    };
    name = "istiod-gateway-controller-istio-system";
  };
  roleRef = {
    apiGroup = "rbac.authorization.k8s.io";
    kind = "ClusterRole";
    name = "istiod-gateway-controller-istio-system";
  };
  subjects = [
    {
      kind = "ServiceAccount";
      name = "istiod";
      namespace = "istio-system";
    }
  ];
}