{{- if .Values.rbac.enable }} # service account for substrate pods themselves # no permissions for the api are required apiVersion: v1 kind: ServiceAccount metadata: labels: app: {{ .Values.GitlabEnvSlug | default .Values.app }} name: {{ .Values.rbac.name }} {{- end }}