In order to make ClusterRoleBindings of service accounts created with Pulumi we always have to do

def extract_resource_name(service_account_resource):
    return service_account_resource.metadata['name']

in order to get the fun -randombits Pulumi adds at the end when making the ClusterRoleBinding in python