diff --git a/tests/golden/defaults/steward/steward/01_rbac.yaml b/tests/golden/defaults/steward/steward/01_rbac.yaml
new file mode 100644
index 0000000..03e97fa
--- /dev/null
+++ b/tests/golden/defaults/steward/steward/01_rbac.yaml
@@ -0,0 +1,43 @@
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  annotations: {}
+  labels:
+    name: syn-admin
+  name: syn-admin
+rules:
+  - apiGroups:
+      - '*'
+    resources:
+      - '*'
+    verbs:
+      - '*'
+  - nonResourceURLs:
+      - '*'
+    verbs:
+      - '*'
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  annotations: {}
+  labels:
+    name: steward
+  name: steward
+  namespace: syn
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  annotations: {}
+  labels:
+    name: syn-steward
+  name: syn-steward
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: syn-admin
+subjects:
+  - kind: ServiceAccount
+    name: steward
+    namespace: syn
diff --git a/tests/golden/defaults/steward/steward/05_secret.yaml b/tests/golden/defaults/steward/steward/05_secret.yaml
new file mode 100644
index 0000000..93b79aa
--- /dev/null
+++ b/tests/golden/defaults/steward/steward/05_secret.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+data:
+  token: ''
+kind: Secret
+metadata:
+  annotations: {}
+  labels:
+    name: steward
+  name: steward
+  namespace: syn
+stringData:
+  token: t-silent-test-1234/c-green-test-1234/steward/token
+type: Opaque
diff --git a/tests/golden/defaults/steward/steward/10_deployment.yaml b/tests/golden/defaults/steward/steward/10_deployment.yaml
new file mode 100644
index 0000000..f179a0a
--- /dev/null
+++ b/tests/golden/defaults/steward/steward/10_deployment.yaml
@@ -0,0 +1,69 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  annotations: {}
+  labels:
+    app.kubernetes.io/managed-by: syn
+    app.kubernetes.io/name: steward
+  name: steward
+  namespace: syn
+spec:
+  minReadySeconds: 30
+  replicas: 1
+  revisionHistoryLimit: 10
+  selector:
+    matchLabels:
+      app.kubernetes.io/managed-by: syn
+      app.kubernetes.io/name: steward
+  strategy:
+    rollingUpdate:
+      maxSurge: 25%
+      maxUnavailable: 25%
+    type: RollingUpdate
+  template:
+    metadata:
+      annotations: {}
+      labels:
+        app.kubernetes.io/managed-by: syn
+        app.kubernetes.io/name: steward
+    spec:
+      containers:
+        - args: []
+          env:
+            - name: STEWARD_API
+              value: https://api.syn.vshn.net/
+            - name: STEWARD_ARGO_IMAGE
+              value: quay.io/argoproj/argocd:v2.3.12@sha256:57474c3c31d2e3606e9c7dad2e449e604a48ac8e9aaaa413274aed41e6550e59
+            - name: STEWARD_CLUSTER_ID
+              value: c-green-test-1234
+            - name: STEWARD_NAMESPACE
+              valueFrom:
+                fieldRef:
+                  apiVersion: v1
+                  fieldPath: metadata.namespace
+            - name: STEWARD_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  key: token
+                  name: steward
+          image: docker.io/projectsyn/steward:v0.10.0@sha256:97d526bf5493e9dd8923818ff70ae7c778f0b726efbafb1f42f8b6316fd4cd03
+          imagePullPolicy: Always
+          name: steward
+          ports: []
+          resources:
+            limits:
+              cpu: 200m
+              memory: 64Mi
+            requests:
+              cpu: 100m
+              memory: 32Mi
+          securityContext:
+            runAsNonRoot: true
+          stdin: false
+          tty: false
+          volumeMounts: []
+      imagePullSecrets: []
+      initContainers: []
+      serviceAccountName: steward
+      terminationGracePeriodSeconds: 30
+      volumes: []
diff --git a/tests/golden/defaults/steward/steward/20_additional_facts.yaml b/tests/golden/defaults/steward/steward/20_additional_facts.yaml
new file mode 100644
index 0000000..de259f2
--- /dev/null
+++ b/tests/golden/defaults/steward/steward/20_additional_facts.yaml
@@ -0,0 +1,12 @@
+apiVersion: v1
+data:
+  blub: blub
+  blubobj: '{"blub":"blub"}'
+kind: ConfigMap
+metadata:
+  annotations: {}
+  labels:
+    app.kubernetes.io/managed-by: syn
+    app.kubernetes.io/name: steward
+  name: additional-facts
+  namespace: syn