RFE: Annotation to control Kustomize modification of namespace in RoleBinding subject (#4301)

[Lars Kellogg-Stedman]

I was recently bitten by https://github.com/kubernetes-sigs/kustomize/issues/1599, in which Kustomize automagically modifies the namespace attribute of subjects in a rolebinding that target the default ServiceAccount.

This was surprising, since it *only* happens for the "default" account. I'd like to see the ability to turn off this behavior in situations in which someone wants the default ServiceAccount of another namespace in the subject of a rolebinding.

I've opened https://github.com/kubernetes-sigs/kustomize/issues/4301 with this feature request. I'm working on an implementation.

Cheers,

-- Lars