rule.yml

---
apiVersion: v1
data:
  key: dmFsdWU=
kind: Secret
metadata:
  name: secret-name
  namespace: other-namespace
type: Opaque
---
apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
  name: sync-svc-account
spec:
  rules:
    - name: sync-secret
      match:
        resources:
          kinds:
            - Namespace
          selector:
            matchLabels:
              "key": "value"
      generate:
        kind: Secret
        name: secret-name
        namespace: "{{request.object.metadata.name}}"
        synchronize: true
        clone:
          namespace: other-namespace
          name: secret-name
    - name: sync-svc-account
      match:
        resources:
          kinds:
            - Namespace
          selector:
            matchLabels:
              "key": "value"
      generate:
        synchronize: true
        kind: ServiceAccount
        name: account-name
        namespace: "{{request.object.metadata.name}}"
        data:
          secrets:
            - name: secret-name