The namespace is created in next way, so "role bindings" are applied depending of the "app_env" code
**variables.tf** variable app_name {}