1. Controller - add logic to query the application service account. 2. Add this to the values of the CR when a CR is created. 3. Check if need to add anything in kubetunnel-server helm chart to configure the serviceaccount.