gistfile1.txt

$ kubectl get clusterrole onboarding -o yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
  annotations:
    kubectl.kubernetes.io/last-applied-configuration: |
      {"apiVersion":"rbac.authorization.k8s.io/v1beta1","kind":"ClusterRole","metadata":{"annotations":{},"name":"onboarding","namespace":""},"rules":[{"apiGroups":["*"],"resources":["namespace,role,rolebinding,resourcequota"],"verbs":["*"]}]}
  creationTimestamp: 2018-10-01T20:56:41Z
  name: onboarding
  resourceVersion: "753562"
  selfLink: /apis/rbac.authorization.k8s.io/v1/clusterroles/onboarding
  uid: 7f87b995-c5bc-11e8-bfe9-42010a8000a9
rules:
- apiGroups:
  - '*'
  resources:
  - namespace,role,rolebinding,resourcequota
  verbs:
  - '*'
$ kubectl get clusterrolebinding onboarding -o yaml
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  creationTimestamp: 2018-10-01T20:56:50Z
  name: onboarding
  resourceVersion: "753577"
  selfLink: /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/onboarding
  uid: 849d078d-c5bc-11e8-bfe9-42010a8000a9
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: onboarding
subjects:
- kind: ServiceAccount
  name: onboarding
  namespace: kube-system