---
# Long-lived token for ServiceAccount (Kubernetes 1.24+ requires explicit Secret)
apiVersion: v1
kind: Secret
metadata:
  name: {{ dev_access_token_secret_name }}
  namespace: {{ dev_access_namespace }}
  annotations:
    kubernetes.io/service-account.name: {{ dev_access_sa_name }}
type: kubernetes.io/service-account-token