{{- if .Values.rbac.enable }} # service account for substrate pods themselves # no permissions for the api are required apiVersion: v1 kind: ServiceAccount metadata: labels: app: substrate name: {{ .Values.rbac.name }} {{- end }}