create ServiceAccount and ClusterRoleBinding for storage-provisioner

deploy/addons/storage-provisioner/storage-provisioner.yaml

@@ -12,6 +12,32 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: storage-provisioner
+  namespace: kube-system
+  labels:
+    addonmanager.kubernetes.io/mode: EnsureExists
+
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: storage-provisioner
+  labels:
+    addonmanager.kubernetes.io/mode: EnsureExists
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: system:persistent-volume-provisioner
+subjects:
+  - kind: ServiceAccount
+    name: storage-provisioner
+    namespace: kube-system
+
+---
 apiVersion: v1
 kind: Pod
 metadata:
@@ -21,6 +47,7 @@ metadata:
     integration-test: storage-provisioner
     addonmanager.kubernetes.io/mode: EnsureExists
 spec:
+  serviceAccountName: storage-provisioner
   hostNetwork: true
   containers:
   - name: storage-provisioner