@Test
public void shouldMountServiceAccount() {

  final Pod pod = createPod(WORKFLOW_INSTANCE, RUN_SPEC_WITH_SA, SECRET_SPEC_WITH_SA);
  assertThat(pod.getSpec().getVolumes().size(), is(1));
  assertThat(pod.getSpec().getVolumes().get(0).getName(),
             is(KubernetesDockerRunner.STYX_WORKFLOW_SA_SECRET_NAME));
  assertThat(pod.getSpec().getContainers().size(), is(2));
  final Container mainContainer = pod.getSpec().getContainers().get(0);
  assertThat(mainContainer.getEnv().stream()
          .anyMatch(e -> e.getName().equals(KubernetesDockerRunner.STYX_WORKFLOW_SA_ENV_VARIABLE)),
      is(true));
}