creates a RoleBinding:
  1: |
    apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata:
      name: RELEASE-NAME
      namespace: NAMESPACE
    roleRef:
      apiGroup: rbac.authorization.k8s.io
      kind: Role
      name: RELEASE-NAME
    subjects:
    - kind: ServiceAccount
      name: RELEASE-NAME
      namespace: NAMESPACE
sets RoleBinding labels when specified:
  1: |
    apiVersion: rbac.authorization.k8s.io/v1
    kind: RoleBinding
    metadata:
      labels:
        app.kubernetes.io/name: teleport-kube-agent
        resource: rolebinding
      name: RELEASE-NAME
      namespace: NAMESPACE
    roleRef:
      apiGroup: rbac.authorization.k8s.io
      kind: Role
      name: RELEASE-NAME
    subjects:
    - kind: ServiceAccount
      name: RELEASE-NAME
      namespace: NAMESPACE