···289289290290 // Use dedicated service account with minimal permissions
291291 // Note: imagePullSecrets should be attached to this SA, not the controller SA
292292- ServiceAccountName: "spindle-job-runner",
292292+ ServiceAccountName: "loom-spindle-job-runner",
293293 },
294294 },
295295 },