fixup! fixup! fixup! Ensure that jobs run with the controller service account if no service account is specified.

chart/templates/deployment.yaml

@@ -48,7 +48,6 @@ spec:
         resources: {{- toYaml .Values.sa.manager.resources | nindent 10 }}
         securityContext: {{- toYaml .Values.sa.manager.containerSecurityContext | nindent
           10 }}
-      securityContext:
-        runAsNonRoot: true
+      securityContext: {{- toYaml .Values.sa.podSecurityContext | nindent 8 }}
       serviceAccountName: {{ include "chart.fullname" . }}-sa
       terminationGracePeriodSeconds: 10

chart/templates/sa-metrics-service.yaml

@@ -9,6 +9,6 @@ spec:
   type: {{ .Values.saMetricsService.type }}
   selector:
     control-plane: sa
-  {{- include "chart.selectorLabels" . | nindent 4 }}
+    {{- include "chart.selectorLabels" . | nindent 4 }}
   ports:
-	{{- .Values.saMetricsService.ports | toYaml | nindent 2 }}
+  {{- .Values.saMetricsService.ports | toYaml | nindent 2 }}