modified: deploy/app/helm-values.yaml

deploy/app/helm-values.yaml

@@ -69,7 +69,16 @@ valkey:
       # The platform team applies disruption policies separately at the
       # infrastructure layer, keeping a clean separation of responsibilities.
       create: false 
-    
+    serviceAccount:
+      # serviceAccount resources are owned and managed by the Infrastructure layer.
+      # The CI/CD ServiceAccount used for application deployments does not have
+      # permissions to create or modify serviceAccounts, by design.
+      #
+      # In this setup Valkey does not require its own ServiceAccount, so enabling
+      # this would provide no benefit and would cause Helm upgrades to fail due
+      # to RBAC restrictions. 
+      create: false 
+      name: "default"