kubespray/roles/kubernetes-apps/policy_controller/calico/templates/calico-kube-sa.yml.j2

---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: calico-kube-controllers
  namespace: kube-system