service-account.tf

resource "kubernetes_service_account" "secret_privileged" {
  metadata {
    name      = "secret-privileged-sa"
    namespace = kubernetes_namespace.playground.id
    annotations = {
      "kubernetes.io/enforce-mountable-secrets" = "true"
    }
  }
  secret {
    name = kubernetes_secret.top_secret.metadata[0].name
  }
  automount_service_account_token = false
}