Worked on the external-secrets/external-secrets repository to deliver a security-focused enhancement for Kubernetes RBAC within Helm charts. Developed a conditional RBAC rule using YAML to restrict service account token creation to designated service accounts, aligning with security best practices and the principle of least privilege. This approach improved access control by gating token issuance at the chart level, reducing potential blast radius and supporting policy-compliant deployments. The work strengthened governance and auditability for service account management without introducing new bugs. The feature demonstrated a focused application of Helm, Kubernetes, and RBAC expertise to address a targeted security requirement in the project.