feat: add capv serviceaccount

- Use a serviceaccount dedicated for capv instead of using an default serviceaccount from the namespace in which it is deployed

Author: viveksyngh

config/manager/manager.yaml

@@ -66,6 +66,7 @@ spec:
         seccompProfile:
           type: RuntimeDefault
       terminationGracePeriodSeconds: 10
+      serviceAccountName: manager
       tolerations:
         - effect: NoSchedule
           key: node-role.kubernetes.io/master

config/rbac/kustomization.yaml

@@ -6,5 +6,6 @@ resources:
 - leader_election_role.yaml
 - leader_election_role_binding.yaml
 - aggregate_role.yaml
+- serviceaccount.yaml
 patchesStrategicMerge:
 - aggregate_labels.yaml

config/rbac/leader_election_role_binding.yaml

@@ -8,5 +8,5 @@ roleRef:
   name: leader-election-role
 subjects:
 - kind: ServiceAccount
-  name: default
+  name: manager
   namespace: system

config/rbac/role_binding.yaml

@@ -8,5 +8,5 @@ roleRef:
   name: manager-role
 subjects:
 - kind: ServiceAccount
-  name: default
+  name: manager
   namespace: system

config/rbac/serviceaccount.yaml

@@ -0,0 +1,5 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: manager
+  namespace: system