Update spec with service_accounts