apiVersion: v1 kind: ServiceAccount metadata: name: kubelet-csr-approver namespace: kube-system