{{- if and .Values.create.enabled (eq .Values.create.appRole.mode "k8s") -}}
apiVersion: v1
kind: ServiceAccount
metadata:
  name: {{ include "vault.fullname" . }}-sa
  labels:
    app.kubernetes.io/name: {{ include "vault.fullname" . }}
{{- end -}}