+{{- /* Due to GKE versions (e.g. v1.23.15-gke.1900) we need to handle pre-release part of the version as well.
+See the related documentation of semver module that Helm depends on for semverCompare:
+https://github.com/Masterminds/semver#working-with-prerelease-versions
+Related Helm issue: https://github.com/helm/helm/issues/3810 */}}
+{{- if and (or .Values.deployment.serviceAccount.create .Values.deployment.serviceAccount.name) (semverCompare "<1.20.0-0" .Capabilities.KubeVersion.Version) }}
+apiVersion: v1
+kind: Secret
+metadata:
+ name: {{ template "kong.serviceAccountTokenName" . }}
+ namespace: {{ template "kong.namespace" . }}
+ annotations:
+ kubernetes.io/service-account.name: {{ template "kong.serviceAccountName" . }}
+type: kubernetes.io/service-account-token
+{{- end }}