ROB-2586 allow disable svc account (#1959)

* add option to disable runner service account

* fix runner prefix

* disable forwarder service account

* add kubewatch createServiceAccount

---------

Co-authored-by: arik <alon.arik@gmail.com>

Author: RoiGlinik

helm/robusta/templates/forwarder-service-account.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.kubewatch.createServiceAccount }}
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
@@ -135,3 +136,4 @@ subjects:
   - kind: ServiceAccount
     name: {{ include "robusta.fullname" . }}-forwarder-service-account
     namespace: {{ .Release.Namespace }}
+{{- end }} # createServiceAccount

helm/robusta/templates/runner-service-account.yaml

@@ -1,3 +1,4 @@
+{{- if .Values.runner.createServiceAccount }}
 kind: ClusterRole
 apiVersion: rbac.authorization.k8s.io/v1
 metadata:
@@ -372,3 +373,4 @@ roleRef:
   kind: ClusterRole
   name: cluster-monitoring-view
 {{- end }}
+{{- end }} # runner.createServiceAccount

helm/robusta/values.yaml

@@ -662,6 +662,7 @@ kubewatch:
       readOnlyRootFilesystem: false
       runAsUser: 1000
     pod: {}
+  createServiceAccount: true
   customServiceAccount: "" # to override the kubewatch service account
   serviceMonitor:
     path: /metrics
@@ -702,6 +703,7 @@ runner:
   sentry_dsn: https://4f1a66f025c60830fec303a094dcdf94@o1120648.ingest.sentry.io/6156573
   sendAdditionalTelemetry: false
   certificate: "" # base64 encoded
+  createServiceAccount: true
   customServiceAccount: "" # to override the runner service account
   resources:
     requests: