From 24c124d6eb4a79bac3461a21eb615f1f93e63477 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Fri, 30 Jan 2026 19:53:00 +1100
Subject: [PATCH] chore: rancher pods use rancher service account

- update bound service account names to be `rancher`
- update namespace to cattle-system (do not run rancher in another namespace)
---
 config/auth_kubernetes_role/k8s/au/syd1/rancher.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/config/auth_kubernetes_role/k8s/au/syd1/rancher.yaml b/config/auth_kubernetes_role/k8s/au/syd1/rancher.yaml
index 9f2d250..8f30ebf 100644
--- a/config/auth_kubernetes_role/k8s/au/syd1/rancher.yaml
+++ b/config/auth_kubernetes_role/k8s/au/syd1/rancher.yaml
@@ -1,6 +1,6 @@
 bound_service_account_names:
   - rancher
 bound_service_account_namespaces:
-  - default
+  - cattle-system
 token_ttl: 60
 audience: vault