feat(mycloud-authentik): reactivat serviceAccount for blueprint (before 2024)

mycloud-authentik/templates/release.yaml

@@ -69,7 +69,7 @@ spec:
     # https://github.com/goauthentik/helm/pull/146
     #
     serviceAccount:
-      create: true
+      create: false
 
     {{- $host := .Values.ingress.host | default (printf "auth.%s" .Values.commons.ingress.domain) }}
     global:
@@ -88,6 +88,7 @@ spec:
           labels:
             {{- toYaml .Values.commons.prometheus.monitor.labels | nindent 12 }}
 
+      serviceAccount: {{ .Release.Name }}
       extraContainers:
         - name: sidecar-blueprints
           image: "ghcr.io/kiwigrid/k8s-sidecar:1.26.0"
@@ -137,6 +138,8 @@ spec:
           labels:
             {{- toYaml .Values.commons.prometheus.monitor.labels | nindent 12 }}
 
+
+      serviceAccount: {{ .Release.Name }}
       extraContainers:
         - name: sidecar-blueprints
           image: "ghcr.io/kiwigrid/k8s-sidecar:1.26.0"

mycloud-authentik/templates/role-binding.yaml

@@ -8,4 +8,4 @@ roleRef:
   name: {{ .Release.Name }}-blueprint-sidecar
 subjects:
   - kind: ServiceAccount
-    name: {{ .Release.Name }}-hr
+    name: {{ .Release.Name }}

mycloud-authentik/templates/serviceaccount.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: {{ .Release.Name }}