{{- /*
ServiceAccount for application-controller (slice C4 / CC3 of EPIC-0 #1095).

Reconciles Application.apps.openova.io/v1 CRs into per-region
Kustomization + HelmRelease manifests committed to the per-Org Gitea
repo. Default off — operator opts in per-Sovereign overlay.
*/ -}}
{{- if .Values.controllers.application.enabled }}
apiVersion: v1
kind: ServiceAccount
metadata:
  name: {{ include "controllers.fullname" "application" }}
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "controllers.labels" (dict "name" "application" "root" .) | nindent 4 }}
{{- end }}
