apiVersion: rbac.istio.io/v1alpha1
kind: ServiceRoleBinding
metadata:
  labels:
    app.kubernetes.io/component: ml-pipeline
    app.kubernetes.io/name: kubeflow-pipelines
  name: bind-ml-pipeline-internal
  namespace: kubeflow
spec:
  roleRef:
    kind: ServiceRole
    name: ml-pipeline-services
  subjects:
  - properties:
      source.principal: cluster.local/ns/kubeflow/sa/ml-pipeline
  - properties:
      source.principal: cluster.local/ns/kubeflow/sa/ml-pipeline-ui
  - properties:
      source.principal: cluster.local/ns/kubeflow/sa/ml-pipeline-persistenceagent
  - properties:
      source.principal: cluster.local/ns/kubeflow/sa/ml-pipeline-scheduledworkflow
  - properties:
      source.principal: cluster.local/ns/kubeflow/sa/ml-pipeline-viewer-crd-service-account
  - properties:
      source.principal: cluster.local/ns/kubeflow/sa/kubeflow-pipelines-cache
