apiVersion: v1
kind: ClusterRoleBinding
metadata:
  name: {{obj_name}}
{% if crb_usernames is defined %}
userNames:
{% for name in crb_usernames %}
  - {{ name }}
{% endfor %}
{% endif %}
{% if crb_groupnames is defined %}
groupNames:
{% for name in crb_groupnames %}
  - {{ name }}
{% endfor %}
{% endif %}
subjects:
{% for sub in subjects %}
  - kind: {{ sub.kind }}
    name: {{ sub.name }}
    namespace: {{sub.namespace}}
{% endfor %}
roleRef:
  name: {{obj_name}}