clusters/cl01tl/helm/talos/templates/_helpers.tpl

@@ -17,5 +17,8 @@ app.kubernetes.io/part-of: {{ .Release.Name }}
 ServiceAccount names
 */}}
 {{- define "custom.serviceAccountName" -}}
+talos-backup
+{{- end -}}
+{{- define "custom.serviceAccountSecretsName" -}}
 talos-backup-secrets
 {{- end -}}

clusters/cl01tl/helm/talos/templates/service-account.yaml

@@ -1,4 +1,4 @@
-apiVersion: talos.dev/v1alpha1
+apiVersion: v1
 kind: ServiceAccount
 metadata:
   name: {{ include "custom.serviceAccountName" . }}
@@ -6,6 +6,16 @@ metadata:
   labels:
     app.kubernetes.io/name: {{ include "custom.serviceAccountName" . }}
     {{- include "custom.labels" . | nindent 4 }}
+
+---
+apiVersion: talos.dev/v1alpha1
+kind: ServiceAccount
+metadata:
+  name: {{ include "custom.serviceAccountSecretsName" . }}
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: {{ include "custom.serviceAccountSecretsName" . }}
+    {{- include "custom.labels" . | nindent 4 }}
 spec:
   roles:
     - os:etcd:backup

clusters/cl01tl/helm/talos/values.yaml

@@ -16,7 +16,7 @@ etcd-backup:
         backoffLimit: 3
         parallelism: 1
       serviceAccount:
-        name: talos-backup-secrets
+        name: talos-backup
       containers:
         backup:
           image:
@@ -98,7 +98,7 @@ etcd-backup:
         backoffLimit: 3
         parallelism: 1
       serviceAccount:
-        name: talos-backup-secrets
+        name: talos-backup
       containers:
         backup:
           image:
@@ -180,7 +180,7 @@ etcd-backup:
         backoffLimit: 3
         parallelism: 1
       serviceAccount:
-        name: talos-backup-secrets
+        name: talos-backup
       containers:
         backup:
           image: