apiVersion: v1
kind: ServiceAccount
metadata:
  name: funnel
  namespace: ${TES_NAMESPACE}
  # No IRSA/IAM annotation needed on OVHcloud — S3 credentials are passed
  # via environment variables from the ovh-s3-credentials Secret instead.