eg. system:controller:generic-garbage-collector system:kube-scheduler ```bash kubectl get clusterroles,roles,rolebindings,clusterrolebindings -A ``` xref <https://github.com/GoogleContainerTools/kpt/issues/899>