sets ServiceAccount annotations when specified: 1: | apiVersion: v1 kind: ServiceAccount metadata: annotations: kubernetes.io/serviceaccount: test-annotation kubernetes.io/serviceaccount-different: 5 name: RELEASE-NAME namespace: NAMESPACE sets ServiceAccount labels when specified: 1: | apiVersion: v1 kind: ServiceAccount metadata: labels: app.kubernetes.io/name: teleport-kube-agent resource: serviceaccount name: RELEASE-NAME namespace: NAMESPACE