--- apiVersion: v1 kind: ServiceAccount metadata: name: calico-policy-controller namespace: {{ system_namespace }} labels: kubernetes.io/cluster-service: "true"