--- apiVersion: v1 kind: ServiceAccount metadata: name: calico-kube-controllers namespace: {{ system_namespace }} labels: kubernetes.io/cluster-service: "true"