The ClusterRoleBinding references the service account in the `default` namespace, while it is being created in the `observatorium-operator` namespace: https://github.com/observatorium/operator/blob/f3b220bbfabcda38f0272248f49f086d9178602d/manifests/cluster_role_binding.yaml#L16 vs. https://github.com/observatorium/operator/blob/f3b220bbfabcda38f0272248f49f086d9178602d/manifests/service_account.yaml#L8