From 3e6dfa72ec6e64c681027e07ab5609d329da023e Mon Sep 17 00:00:00 2001
From: Alex Lebens <alexanderlebens@gmail.com>
Date: Sun, 26 Apr 2026 13:02:13 -0500
Subject: [PATCH] feat: move service account to template

---
 .../helm/talos/templates/service-account.yaml | 20 +++++++++++++++++++
 clusters/cl01tl/helm/talos/values.yaml        |  6 ------
 2 files changed, 20 insertions(+), 6 deletions(-)

diff --git a/clusters/cl01tl/helm/talos/templates/service-account.yaml b/clusters/cl01tl/helm/talos/templates/service-account.yaml
index 605a45acd..42a87eaae 100644
--- a/clusters/cl01tl/helm/talos/templates/service-account.yaml
+++ b/clusters/cl01tl/helm/talos/templates/service-account.yaml
@@ -9,3 +9,23 @@ metadata:
 spec:
   roles:
     - os:etcd:backup
+
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: talos-backup
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: talos-backup
+    {{- include "custom.labels" . | nindent 4 }}
+
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: talos-defrag
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: talos-defrag
+    {{- include "custom.labels" . | nindent 4 }}
diff --git a/clusters/cl01tl/helm/talos/values.yaml b/clusters/cl01tl/helm/talos/values.yaml
index 9e49b2b6b..b1b660060 100644
--- a/clusters/cl01tl/helm/talos/values.yaml
+++ b/clusters/cl01tl/helm/talos/values.yaml
@@ -264,9 +264,6 @@ etcd-backup:
               value: External
             - name: DATE_RANGE_SECONDS
               value: "1209600"
-  serviceAccount:
-    talos-backup:
-      enabled: true
   persistence:
     secret:
       enabled: true
@@ -477,9 +474,6 @@ etcd-defrag:
           env:
             - name: TALOSCONFIG
               value: /tmp/.talos/config
-  serviceAccount:
-    talos-defrag:
-      enabled: true
   persistence:
     config:
       type: custom