apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: dev-cm-flux-web-admin
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: flux-web-admin
subjects:
  - kind: Group
    name: dev.cm:owners
    apiGroup: rbac.authorization.k8s.io
  - kind: Group
    name: dev.cm:admins
    apiGroup: rbac.authorization.k8s.io

---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: dev-cm-flux-web-user
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: flux-web-user
subjects:
  - kind: Group
    name: dev.cm
    apiGroup: rbac.authorization.k8s.io