kubectl get clusterrolebinding kubectl create clusterrolebinding suosheng-rebinding --clusterrole=cluster-admin --user=suosheng-serviceaccount -n monitoring