diff --git a/tests/vendor/kpack/release-0.13.1.yaml b/tests/vendor/kpack/release-0.13.1.yaml
deleted file mode 100644
index 7224d06ee..000000000
--- a/tests/vendor/kpack/release-0.13.1.yaml
+++ /dev/null
@@ -1,1072 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: kpack
-  labels:
-    pod-security.kubernetes.io/enforce: restricted
-    pod-security.kubernetes.io/enforce-version: v1.25
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  name: builds.kpack.io
-spec:
-  group: kpack.io
-  versions:
-  - name: v1alpha1
-    served: true
-    storage: false
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    subresources:
-      status: {}
-    additionalPrinterColumns:
-    - name: Image
-      type: string
-      jsonPath: .status.latestImage
-    - name: Succeeded
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Succeeded")].status
-  - name: v1alpha2
-    served: true
-    storage: true
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    subresources:
-      status: {}
-    additionalPrinterColumns:
-    - name: Image
-      type: string
-      jsonPath: .status.latestImage
-    - name: Succeeded
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Succeeded")].status
-  conversion:
-    strategy: Webhook
-    webhook:
-      clientConfig:
-        service:
-          name: kpack-webhook
-          namespace: kpack
-          path: /convert
-          port: 443
-      conversionReviewVersions:
-      - v1
-  names:
-    kind: Build
-    listKind: BuildList
-    singular: build
-    plural: builds
-    shortNames:
-    - cnbbuild
-    - cnbbuilds
-    - bld
-    - blds
-    categories:
-    - kpack
-  scope: Namespaced
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  name: builders.kpack.io
-spec:
-  group: kpack.io
-  versions:
-  - name: v1alpha1
-    served: true
-    storage: false
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    subresources:
-      status: {}
-    additionalPrinterColumns:
-    - name: LatestImage
-      type: string
-      jsonPath: .status.latestImage
-    - name: Ready
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Ready")].status
-  - name: v1alpha2
-    served: true
-    storage: true
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    subresources:
-      status: {}
-    additionalPrinterColumns:
-    - name: LatestImage
-      type: string
-      jsonPath: .status.latestImage
-    - name: Ready
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Ready")].status
-    - name: UpToDate
-      type: string
-      jsonPath: .status.conditions[?(@.type=="UpToDate")].status
-  conversion:
-    strategy: Webhook
-    webhook:
-      clientConfig:
-        service:
-          name: kpack-webhook
-          namespace: kpack
-          path: /convert
-          port: 443
-      conversionReviewVersions:
-      - v1
-  names:
-    kind: Builder
-    listKind: BuilderList
-    singular: builder
-    plural: builders
-    shortNames:
-    - bldr
-    - bldrs
-    categories:
-    - kpack
-  scope: Namespaced
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  name: buildpacks.kpack.io
-spec:
-  group: kpack.io
-  versions:
-  - name: v1alpha2
-    served: true
-    storage: true
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    subresources:
-      status: {}
-    additionalPrinterColumns:
-    - name: Ready
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Ready")].status
-  names:
-    kind: Buildpack
-    listKind: BuildpackList
-    singular: buildpack
-    plural: buildpacks
-    shortNames:
-    - bp
-    - bps
-    categories:
-    - kpack
-  scope: Namespaced
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  name: clusterbuilders.kpack.io
-spec:
-  group: kpack.io
-  versions:
-  - name: v1alpha1
-    served: true
-    storage: false
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    subresources:
-      status: {}
-    additionalPrinterColumns:
-    - name: LatestImage
-      type: string
-      jsonPath: .status.latestImage
-    - name: Ready
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Ready")].status
-  - name: v1alpha2
-    served: true
-    storage: true
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    subresources:
-      status: {}
-    additionalPrinterColumns:
-    - name: LatestImage
-      type: string
-      jsonPath: .status.latestImage
-    - name: Ready
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Ready")].status
-    - name: UpToDate
-      type: string
-      jsonPath: .status.conditions[?(@.type=="UpToDate")].status
-  names:
-    kind: ClusterBuilder
-    listKind: ClusterBuilderList
-    singular: clusterbuilder
-    plural: clusterbuilders
-    shortNames:
-    - clstbldr
-    - clstbldrs
-    categories:
-    - kpack
-  scope: Cluster
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  name: clusterbuildpacks.kpack.io
-spec:
-  group: kpack.io
-  versions:
-  - name: v1alpha2
-    served: true
-    storage: true
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    subresources:
-      status: {}
-    additionalPrinterColumns:
-    - name: Ready
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Ready")].status
-  names:
-    kind: ClusterBuildpack
-    listKind: ClusterBuildpackList
-    singular: clusterbuildpack
-    plural: clusterbuildpacks
-    shortNames:
-    - clstbp
-    - clstbps
-    categories:
-    - kpack
-  scope: Cluster
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  name: clusterstacks.kpack.io
-spec:
-  group: kpack.io
-  versions:
-  - name: v1alpha1
-    served: true
-    storage: false
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    subresources:
-      status: {}
-    additionalPrinterColumns:
-    - name: Ready
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Ready")].status
-  - name: v1alpha2
-    served: true
-    storage: true
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    subresources:
-      status: {}
-    additionalPrinterColumns:
-    - name: Ready
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Ready")].status
-  names:
-    kind: ClusterStack
-    listKind: ClusterStackList
-    singular: clusterstack
-    plural: clusterstacks
-    categories:
-    - kpack
-  scope: Cluster
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  name: clusterstores.kpack.io
-spec:
-  group: kpack.io
-  versions:
-  - name: v1alpha1
-    served: true
-    storage: false
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    additionalPrinterColumns:
-    - name: Ready
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Ready")].status
-    subresources:
-      status: {}
-  - name: v1alpha2
-    served: true
-    storage: true
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    additionalPrinterColumns:
-    - name: Ready
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Ready")].status
-    subresources:
-      status: {}
-  names:
-    kind: ClusterStore
-    listKind: ClusterStoreList
-    singular: clusterstore
-    plural: clusterstores
-    categories:
-    - kpack
-  scope: Cluster
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: config-logging
-  namespace: kpack
-data:
-  zap-logger-config: |
-    {
-      "level": "info",
-      "development": false,
-      "outputPaths": ["stdout"],
-      "errorOutputPaths": ["stderr"],
-      "encoding": "json",
-      "encoderConfig": {
-        "timeKey": "ts",
-        "levelKey": "level",
-        "nameKey": "logger",
-        "callerKey": "caller",
-        "messageKey": "msg",
-        "stacktraceKey": "stacktrace",
-        "lineEnding": "",
-        "levelEncoder": "",
-        "timeEncoder": "rfc3339nano",
-        "durationEncoder": "",
-        "callerEncoder": ""
-      }
-    }
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: build-init-image
-  namespace: kpack
-data:
-  image: gcr.io/cf-build-service-public/kpack/build-init@sha256:0a00c483aa231b016f56d3f9509ed2722c8eb18088c851e3c654b45f36f11b82
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: build-init-windows-image
-  namespace: kpack
-data:
-  image: gcr.io/cf-build-service-public/kpack/build-init-windows@sha256:1259e3374f38d47e3ec738eede6b2f1689dbe8f8c7f0cfc5f3ed027f03a6cfeb
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: build-waiter-image
-  namespace: kpack
-data:
-  image: gcr.io/cf-build-service-public/kpack/build-waiter@sha256:98b935098d47549be584124e6e1430dace8d673498bd070f16be1c5bc85cf9e5
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: rebase-image
-  namespace: kpack
-data:
-  image: gcr.io/cf-build-service-public/kpack/rebase@sha256:5ec34332d96b7b7b791de99d2c08cb1f874d3aad239c87a9cff9cee21e1bf566
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: lifecycle-image
-  namespace: kpack
-data:
-  image: gcr.io/cf-build-service-public/kpack/lifecycle@sha256:199043ac6fd40f772decb804ca92cdcbb22b76cf8db622761e25c39c2925d3b7
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: completion-image
-  namespace: kpack
-data:
-  image: gcr.io/cf-build-service-public/kpack/completion@sha256:f82853c7349439b6f48fdc9e7a3d296a05e7dc7b64167de572fe317b42a8089a
----
-apiVersion: v1
-kind: ConfigMap
-metadata:
-  name: completion-windows-image
-  namespace: kpack
-data:
-  image: gcr.io/cf-build-service-public/kpack/completion-windows@sha256:0657529d400f6a28c2c7323407b7d3e28da9d1db6adf8273490d09ba65a25cf1
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: kpack-controller
-  namespace: kpack
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: kpack-controller
-  template:
-    metadata:
-      labels:
-        app: kpack-controller
-        version: 0.13.1
-    spec:
-      securityContext:
-        runAsNonRoot: true
-        seccompProfile:
-          type: RuntimeDefault
-      priorityClassName: kpack-control-plane
-      serviceAccountName: controller
-      nodeSelector:
-        kubernetes.io/os: linux
-      containers:
-      - name: controller
-        securityContext:
-          runAsNonRoot: true
-          allowPrivilegeEscalation: false
-          privileged: false
-          seccompProfile:
-            type: RuntimeDefault
-          capabilities:
-            drop:
-            - ALL
-        image: gcr.io/cf-build-service-public/kpack/controller@sha256:820b4456ea30eaab0e7d6ee9d7c93e5ffb89c9ed9aaa731b47872918daa9b8e8
-        env:
-        - name: ENABLE_PRIORITY_CLASSES
-          value: "false"
-        - name: INJECTED_SIDECAR_SUPPORT
-          value: "false"
-        - name: EXPERIMENTAL_GENERATE_SLSA_ATTESTATION
-          value: "false"
-        - name: INSECURE_SSH_TRUST_UNKNOWN_HOSTS
-          value: "true"
-        - name: CONFIG_LOGGING_NAME
-          value: config-logging
-        - name: CONFIG_OBSERVABILITY_NAME
-          value: config-observability
-        - name: METRICS_DOMAIN
-          value: kpack.io
-        - name: SYSTEM_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        - name: SYSTEM_SERVICE_ACCOUNT
-          value: controller
-        - name: BUILD_INIT_IMAGE
-          valueFrom:
-            configMapKeyRef:
-              name: build-init-image
-              key: image
-        - name: BUILD_INIT_WINDOWS_IMAGE
-          valueFrom:
-            configMapKeyRef:
-              name: build-init-windows-image
-              key: image
-        - name: BUILD_WAITER_IMAGE
-          valueFrom:
-            configMapKeyRef:
-              name: build-waiter-image
-              key: image
-        - name: REBASE_IMAGE
-          valueFrom:
-            configMapKeyRef:
-              name: rebase-image
-              key: image
-        - name: COMPLETION_IMAGE
-          valueFrom:
-            configMapKeyRef:
-              name: completion-image
-              key: image
-        - name: COMPLETION_WINDOWS_IMAGE
-          valueFrom:
-            configMapKeyRef:
-              name: completion-windows-image
-              key: image
-        resources:
-          requests:
-            cpu: 20m
-            memory: 1Gi
-          limits:
-            memory: 1Gi
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: controller
-  namespace: kpack
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: kpack-controller-admin
-rules:
-- apiGroups:
-  - kpack.io
-  resources:
-  - builds
-  - builds/status
-  - builds/finalizers
-  - images
-  - images/status
-  - images/finalizers
-  - builders
-  - builders/status
-  - buildpacks
-  - buildpacks/status
-  - clusterbuilders
-  - clusterbuilders/status
-  - clusterbuildpacks
-  - clusterbuildpacks/status
-  - clusterstores
-  - clusterstores/status
-  - clusterstacks
-  - clusterstacks/status
-  - sourceresolvers
-  - sourceresolvers/status
-  verbs:
-  - get
-  - list
-  - create
-  - update
-  - delete
-  - patch
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  - pods/log
-  - namespaces
-  verbs:
-  - get
-- apiGroups:
-  - ""
-  resources:
-  - serviceaccounts
-  verbs:
-  - get
-  - list
-- apiGroups:
-  - ""
-  resources:
-  - persistentvolumeclaims
-  - pods
-  verbs:
-  - get
-  - list
-  - create
-  - update
-  - delete
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - pods
-  verbs:
-  - patch
-- apiGroups:
-  - ""
-  resources:
-  - nodes
-  verbs:
-  - list
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: kpack-controller-admin-binding
-subjects:
-- kind: ServiceAccount
-  name: controller
-  namespace: kpack
-roleRef:
-  kind: ClusterRole
-  name: kpack-controller-admin
-  apiGroup: rbac.authorization.k8s.io
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: kpack-controller-servicebindings-cluster-role
-aggregationRule:
-  clusterRoleSelectors:
-  - matchLabels:
-      servicebinding.io/controller: "true"
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: kpack-controller-servicebindings-binding
-subjects:
-- kind: ServiceAccount
-  name: controller
-  namespace: kpack
-roleRef:
-  kind: ClusterRole
-  name: kpack-controller-servicebindings-cluster-role
-  apiGroup: rbac.authorization.k8s.io
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: kpack-controller-local-config
-  namespace: kpack
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - configmaps
-  verbs:
-  - get
-  - list
-  - watch
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: kpack-controller-local-config-binding
-  namespace: kpack
-subjects:
-- kind: ServiceAccount
-  name: controller
-  namespace: kpack
-roleRef:
-  kind: Role
-  name: kpack-controller-local-config
-  apiGroup: rbac.authorization.k8s.io
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  name: images.kpack.io
-spec:
-  group: kpack.io
-  versions:
-  - name: v1alpha1
-    served: true
-    storage: false
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    subresources:
-      status: {}
-    additionalPrinterColumns:
-    - name: LatestImage
-      type: string
-      jsonPath: .status.latestImage
-    - name: Ready
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Ready")].status
-  - name: v1alpha2
-    served: true
-    storage: true
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    subresources:
-      status: {}
-    additionalPrinterColumns:
-    - name: LatestImage
-      type: string
-      jsonPath: .status.latestImage
-    - name: Ready
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Ready")].status
-  conversion:
-    strategy: Webhook
-    webhook:
-      clientConfig:
-        service:
-          name: kpack-webhook
-          namespace: kpack
-          path: /convert
-          port: 443
-      conversionReviewVersions:
-      - v1
-  names:
-    kind: Image
-    listKind: ImageList
-    singular: image
-    plural: images
-    shortNames:
-    - cnbimage
-    - cnbimages
-    - img
-    - imgs
-    categories:
-    - kpack
-  scope: Namespaced
----
-apiVersion: scheduling.k8s.io/v1
-kind: PriorityClass
-metadata:
-  name: kpack-control-plane
-value: 10000
-globalDefault: false
-description: Super High priority class for kpack control plane components
----
-apiVersion: scheduling.k8s.io/v1
-kind: PriorityClass
-metadata:
-  name: kpack-build-high-priority
-value: 1000
-globalDefault: false
-description: High priority class for kpack builds triggered by user changes.
----
-apiVersion: scheduling.k8s.io/v1
-kind: PriorityClass
-metadata:
-  name: kpack-build-low-priority
-value: 1
-globalDefault: false
-preemptionPolicy: Never
-description: Low priority class for kpack builds triggered by operator changes.
----
-apiVersion: v1
-kind: Service
-metadata:
-  name: kpack-webhook
-  namespace: kpack
-spec:
-  ports:
-  - port: 443
-    targetPort: 8443
-  selector:
-    role: webhook
----
-apiVersion: apiextensions.k8s.io/v1
-kind: CustomResourceDefinition
-metadata:
-  name: sourceresolvers.kpack.io
-spec:
-  group: kpack.io
-  versions:
-  - name: v1alpha1
-    served: true
-    storage: false
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    subresources:
-      status: {}
-    additionalPrinterColumns:
-    - name: Ready
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Ready")].status
-  - name: v1alpha2
-    served: true
-    storage: true
-    schema:
-      openAPIV3Schema:
-        type: object
-        x-kubernetes-preserve-unknown-fields: true
-    subresources:
-      status: {}
-    additionalPrinterColumns:
-    - name: Ready
-      type: string
-      jsonPath: .status.conditions[?(@.type=="Ready")].status
-  conversion:
-    strategy: Webhook
-    webhook:
-      clientConfig:
-        service:
-          name: kpack-webhook
-          namespace: kpack
-          path: /convert
-          port: 443
-      conversionReviewVersions:
-      - v1
-  names:
-    kind: SourceResolver
-    listKind: SourceResolverList
-    singular: sourceresolver
-    plural: sourceresolvers
-    categories:
-    - kpack
-  scope: Namespaced
----
-apiVersion: admissionregistration.k8s.io/v1
-kind: MutatingWebhookConfiguration
-metadata:
-  name: defaults.webhook.kpack.io
-webhooks:
-- admissionReviewVersions:
-  - v1
-  clientConfig:
-    service:
-      name: kpack-webhook
-      namespace: kpack
-  failurePolicy: Fail
-  matchPolicy: Exact
-  sideEffects: None
-  name: defaults.webhook.kpack.io
----
-apiVersion: admissionregistration.k8s.io/v1
-kind: ValidatingWebhookConfiguration
-metadata:
-  name: validation.webhook.kpack.io
-webhooks:
-- admissionReviewVersions:
-  - v1
-  clientConfig:
-    service:
-      name: kpack-webhook
-      namespace: kpack
-  failurePolicy: Fail
-  matchPolicy: Exact
-  sideEffects: None
-  name: validation.webhook.kpack.io
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: webhook-certs
-  namespace: kpack
----
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: kpack-webhook
-  namespace: kpack
-spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app: kpack-webhook
-  template:
-    metadata:
-      labels:
-        app: kpack-webhook
-        role: webhook
-        version: 0.13.1
-    spec:
-      securityContext:
-        runAsNonRoot: true
-        seccompProfile:
-          type: RuntimeDefault
-      priorityClassName: kpack-control-plane
-      serviceAccountName: webhook
-      nodeSelector:
-        kubernetes.io/os: linux
-      containers:
-      - name: webhook
-        securityContext:
-          runAsNonRoot: true
-          allowPrivilegeEscalation: false
-          privileged: false
-          seccompProfile:
-            type: RuntimeDefault
-          capabilities:
-            drop:
-            - ALL
-        image: gcr.io/cf-build-service-public/kpack/webhook@sha256:0fc56b8ef68bf89fd49279d9a5a64448f17c242d84917f05be304d3f7f206aca
-        ports:
-        - name: https-webhook
-          containerPort: 8443
-        env:
-        - name: CONFIG_LOGGING_NAME
-          value: config-logging
-        - name: CONFIG_OBSERVABILITY_NAME
-          value: config-observability
-        - name: METRICS_DOMAIN
-          value: kpack.io
-        - name: SYSTEM_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        resources:
-          requests:
-            cpu: 10m
-            memory: 50Mi
-          limits:
-            cpu: 100m
-            memory: 200Mi
----
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: webhook
-  namespace: kpack
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  name: kpack-webhook-certs-admin
-  namespace: kpack
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - ""
-  resources:
-  - secrets
-  resourceNames:
-  - webhook-certs
-  verbs:
-  - update
-- apiGroups:
-  - ""
-  resources:
-  - configmaps
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - coordination.k8s.io
-  resources:
-  - leases
-  verbs:
-  - get
-  - list
-  - create
-  - update
-  - delete
-  - patch
-  - watch
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: kpack-webhook-certs-admin-binding
-  namespace: kpack
-subjects:
-- kind: ServiceAccount
-  name: webhook
-  namespace: kpack
-roleRef:
-  kind: Role
-  name: kpack-webhook-certs-admin
-  apiGroup: rbac.authorization.k8s.io
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: kpack-webhook-mutatingwebhookconfiguration-admin
-rules:
-- apiGroups:
-  - ""
-  resources:
-  - namespaces
-  resourceNames:
-  - kpack
-  verbs:
-  - get
-- apiGroups:
-  - ""
-  resources:
-  - namespaces/finalizers
-  verbs:
-  - update
-  resourceNames:
-  - kpack
-- apiGroups:
-  - admissionregistration.k8s.io
-  resources:
-  - mutatingwebhookconfigurations
-  resourceNames:
-  - defaults.webhook.kpack.io
-  verbs:
-  - update
-  - delete
-- apiGroups:
-  - admissionregistration.k8s.io
-  resources:
-  - mutatingwebhookconfigurations
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - admissionregistration.k8s.io
-  resources:
-  - validatingwebhookconfigurations
-  resourceNames:
-  - validation.webhook.kpack.io
-  verbs:
-  - update
-  - delete
-- apiGroups:
-  - admissionregistration.k8s.io
-  resources:
-  - validatingwebhookconfigurations
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - storage.k8s.io
-  resources:
-  - storageclasses
-  verbs:
-  - get
-  - list
-  - watch
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  resourceNames:
-  - images.kpack.io
-  - builds.kpack.io
-  - builders.kpack.io
-  - sourceresolvers.kpack.io
-  verbs:
-  - update
-- apiGroups:
-  - apiextensions.k8s.io
-  resources:
-  - customresourcedefinitions
-  verbs:
-  - get
-  - list
-  - watch
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: kpack-webhook-certs-mutatingwebhookconfiguration-admin-binding
-subjects:
-- kind: ServiceAccount
-  name: webhook
-  namespace: kpack
-roleRef:
-  kind: ClusterRole
-  name: kpack-webhook-mutatingwebhookconfiguration-admin
-  apiGroup: rbac.authorization.k8s.io