# ServiceAccount for Upbound AWS Provider in crossplane-system namespace.
# This ServiceAccount is only applied to new regions deployed via `deploy-new-region.sh` script.
# Existing regions will continue to use their current ServiceAccount configurations
# Note: no need to add an annotation for IRSA, since the DeploymentRuntimeConfig has already specified the AWS_ROLE_ARN env var.
apiVersion: v1
kind: ServiceAccount
metadata:
  name: aws-provider-upstream
  namespace: crossplane-system