title: GKE clusterrolebinding for cluster-admin fails with permission error
body: <p>I've just created a new cluster using Google Container Engine running Kubernetes 1.7.5, with the new RBAC permissions enabled. I've run into a problem allocating permissions for some of my services which lead me to the following:</p>
  
  <p>The <a href="https://cloud.google.com/container-engine/docs/role-based-access-control" rel="noreferrer">docs</a> for using container engine with RBAC state that the user must be granted the ability to create authorization roles by running the following command:</p>
  
  <pre><code>kubectl create clusterrolebinding cluster-admin-binding --clusterrole=cluster-admin [--user=&lt;user-name&gt;]
  </code></pre>
  
  <p>However, this fails due to lack of permissions (which I would assume are the very same permissions which we are attempting to grant by running the above command).</p>
  
  <pre><code>Error from server (Forbidden): 
  User "&lt;user-name&gt;" cannot create clusterrolebindings.rbac.authorization.k8s.io at the cluster scope.: 
    "Required \"container.clusterRoleBindings.create\" permission." 
    (post clusterrolebindings.rbac.authorization.k8s.io)
  </code></pre>
  
  <p>Any help would be much appreciated as this is blocking me from creating the permissions needed by my cluster services.</p>