apiVersion: v1
kind: ServiceAccount
metadata:
  # name: profiles-controller-service-account
  # It should have profiles- prefix, but because the profile upstream has added this prefix, it will cause 
  # unique ID not found issue if we specify profiles- in patch.
  name: controller-service-account
  annotations:
    iam.gke.io/gcp-service-account: KUBEFLOW-NAME-admin@PROJECT.iam.gserviceaccount.com # {"$kpt-set":"admin-sa-ref"}
# ---
# apiVersion: v1
# kind: ServiceAccount
# metadata:
#   name: ml-pipeline-ui
#   annotations:
#     iam.gke.io/gcp-service-account: name-user@project-id.iam.gserviceaccount.com # {"$kpt-set":"user-sa-ref"}
# ---
# apiVersion: v1
# kind: ServiceAccount
# metadata:
#   name: ml-pipeline-visualizationserver
#   annotations:
#     iam.gke.io/gcp-service-account: name-user@project-id.iam.gserviceaccount.com # {"$kpt-set":"user-sa-ref"}
# ---
# apiVersion: v1
# kind: ServiceAccount
# metadata:
#   name: pipeline-runner
#   annotations:
#     iam.gke.io/gcp-service-account: name-user@project-id.iam.gserviceaccount.com # {"$kpt-set":"user-sa-ref"}
