---
apiVersion: policy.linkerd.io/v1alpha1
kind: MeshTLSAuthentication
metadata:
  name: {{ .Name }}
  namespace: {{ .Namespace.Name }}
spec:
  {{- if .ServiceAccounts }}
  identityRefs:
  {{- range $sa := .ServiceAccounts }}
    - kind: ServiceAccount
      name: {{ $sa }}
  {{- end }}
  {{- else }}
    fail (printf "no service accounts defined for app %s" .Name )
  {{- end}}