Remove unused ServiceAccount from attachments app and update HelmRelease configuration

apps/attachments/base/helmrelease.yaml

@@ -28,7 +28,8 @@ spec:
       attachments:
         enabled: true
         serviceAccount:
-          # Не создаём SA — используем существующий из base/serviceaccount.yaml.
+          enabled:
+            _default: true
           name:
             _default: attachments-vault
         deployment:

apps/attachments/base/kustomization.yaml

@@ -4,5 +4,4 @@ kind: Kustomization
 namespace: attachments
 resources:
   - namespace.yaml
-  - serviceaccount.yaml
   - helmrelease.yaml

apps/attachments/base/serviceaccount.yaml

@@ -1,5 +0,0 @@
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: attachments-vault
-  namespace: attachments