Status: IN
ServiceAccount subjects use `""` (empty) apiGroup and require a namespace field; User and Group subjects use `rbac.authorization.k8s.io` apiGroup and must not specify a namespace.
Source: entries/2026/03/05/en-documentation-openshift_container_platform-417-html-rbac_apis-rolebinding-rba.md
JSON