title: Kubernetes rolebinding: <namespace>:default being changed to <namespace>:<namespace>-service-account
body: <p>I'm trying to run a deployment on a Kubernetes cluster at work through a GitLab CI/CD process (i.e. I don't control most of the configs). I'm also new to Kubernetes, so please forgive me if this is basic and obvious.</p>
  
  <p>I have created my rolebindings:</p>
  
  <pre><code>kubectl create rolebinding [foo] --clusterrole=edit --serviceaccount=[bar]:default
  </code></pre>
  
  <p>And added my tokens and all settings to GitLab</p>
  
  <p>When the deployment kicks off however, it will always fail at deployment with:</p>
  
  <p><code>Error from server (Forbidden): error when creating "/builds/bar/baz/deployment.yml": service is forbidden: User "system:serviceaccount:bar:bar-service-account" cannot create services in namespace "bar"</code></p>
  
  <p>I thought I should be working in <code>system:serviceaccount:bar:default</code>. why is <code>:default</code> being replaced with <code>:bar-service-account</code> and/or how do I fix this.</p>
  
  <p>Many many thanks in advance</p>