class RoleBinding

A RoleBinding that wires a Role to a ServiceAccount. This is just the binding resource -- the Role and ServiceAccount are defined separately (and emitted together by ServiceAccountWithRole):

RoleBinding.new(role: MyRole, service_account: MyServiceAccount)

The subject namespace is left blank when the ServiceAccount has none, so the SetNamespace middleware fills it with the target namespace.