{ kubenix, ... }: {
  imports = [ kubenix.modules.k8s ];
  kubernetes.resources.clusterRoleBindings.pim-cluster-admin = {
    roleRef = {
      apiGroup = "rbac.authorization.k8s.io";
      kind = "ClusterRole";
      name = "cluster-admin";
    };
    subjects = [
      {
        kind = "User";
        name = "pim";
      }
    ];
  };
}