serviceaccount should be set to the actual account of your environment, the default account will be namespace::default if the spec.serviceAccount is unset. execute this command:

kubectl create clusterrolebinding go-kratos:kube --clusterrole=view --serviceaccount=mesh:default

or use kubect apply -f bind-role.yaml

apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: go-kratos:kube
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: view
subjects:
- kind: ServiceAccount
  name: default
  namespace: mesh

Usage outside the Kubernates Cluster

Set the path ~/.kube/config to KubeConfig

    config.NewSource(SourceOption{
		Namespace:     "mesh",
		LabelSelector: "",
		KubeConfig:    filepath.Join(homedir.HomeDir(), ".kube", "config"),
	})