fix: [k8s service discovery] only replace service account when one isn't set (#4505)

Signed-off-by: Hannah Zhang <hannahz@nvidia.com>

deploy/cloud/operator/internal/dynamo/graph.go

@@ -896,8 +896,10 @@ func GenerateBasePodSpec(
 	}
 
 	if controllerConfig.IsK8sDiscoveryEnabled(component.Annotations) {
+		if podSpec.ServiceAccountName == "" {
 			podSpec.ServiceAccountName = discovery.GetK8sDiscoveryServiceAccountName(parentGraphDeploymentName)
 		}
+	}
 
 	podSpec.Containers = append(podSpec.Containers, container)
 	podSpec.Volumes = append(podSpec.Volumes, volumes...)