# ============================================================
# ClusterRoleBinding - Dev 环境专用
# 把 base 里共享的 ClusterRole 绑定到 dev namespace 的 ServiceAccount
# 集群级资源独立命名，避免与 prod 冲突
# ============================================================
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: rcoder-pods-crb-dev
subjects:
- kind: ServiceAccount
  name: rcoder-pods-sa
  namespace: nuwax-rcoder-dev
roleRef:
  kind: ClusterRole
  name: rcoder-pods-clusterrole
  apiGroup: rbac.authorization.k8s.io