ubuntu:fully-loaded

apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: demo
spec:
  replicas: 1
  template:
    metadata:
      labels:
        app: demo
    spec:
      serviceAccountName: kubectl-role
      containers:
      - name: demo
        stdin: true
        tty: true
        imagePullPolicy: Always
        image: wlan0/ubuntu:fully-loaded
        command: ["/bin/bash"]
        args: ["-c", "sleep infinity"]

---

kind: ClusterRoleBinding
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: kubectl-role-binding
subjects:
- kind: ServiceAccount
  name: kubectl-role
  namespace: default
roleRef:
  kind: ClusterRole
  name: cluster-admin
  apiGroup: rbac.authorization.k8s.io

---

apiVersion: v1
kind: ServiceAccount
metadata:
  name: kubectl-role