{{- /*
ServiceAccount for blueprint-controller (slice C3 / CC3 of EPIC-0 #1095).

Watches Blueprint.catalyst.openova.io/v1 CRs (cluster-scoped) and mirrors
the canonical Blueprint manifest into Gitea via HTTP API. The watch
is read-only on K8s (Blueprint{,/status} only); all mutating writes
go to Gitea over HTTP.
*/ -}}
{{- if .Values.controllers.blueprint.enabled }}
apiVersion: v1
kind: ServiceAccount
metadata:
  name: {{ include "controllers.fullname" "blueprint" }}
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "controllers.labels" (dict "name" "blueprint" "root" .) | nindent 4 }}
{{- end }}
