fix: preserve original subject namespace in RoleBinding and ClusterRoleBinding with -preserve-ns

When -preserve-ns is set, keep the original namespace on binding subjects
instead of replacing it with {{ .Release.Namespace }}. This ensures
correct ServiceAccount references in umbrella chart deployments where
the release namespace differs from the target namespace.

Author: girdharshubham

.gitignore

@@ -29,3 +29,6 @@ testbin/*
 dist/
 
 vendor/
+
+# Binary
+helmify

pkg/processor/rbac/clusterrolebinding.go

@@ -59,7 +59,9 @@ func (r clusterRoleBinding) Process(appMeta helmify.AppMetadata, obj *unstructur
 	}
 
 	for i, s := range rb.Subjects {
-		s.Namespace = "{{ .Release.Namespace }}"
+		if !(appMeta.Config().PreserveNs && s.Namespace != "") {
+			s.Namespace = "{{ .Release.Namespace }}"
+		}
 		s.Name = fmt.Sprintf("{{ include \"%s.serviceAccountName\" . }}", appMeta.ChartName())
 		rb.Subjects[i] = s
 	}

pkg/processor/rbac/rolebinding.go

@@ -57,7 +57,9 @@ func (r roleBinding) Process(appMeta helmify.AppMetadata, obj *unstructured.Unst
 	}
 
 	for i, s := range rb.Subjects {
-		s.Namespace = "{{ .Release.Namespace }}"
+		if !(appMeta.Config().PreserveNs && s.Namespace != "") {
+			s.Namespace = "{{ .Release.Namespace }}"
+		}
 		s.Name = fmt.Sprintf("{{ include \"%s.serviceAccountName\" . }}", appMeta.ChartName())
 		rb.Subjects[i] = s
 	}