Needs to run under service account created by the etcd-operator subchart so there's some template magic needed to figure out what it's called.