Improve ServiceAccount labels to inform users of default SA behaviour…

… and need for RBAC

src/containers/CreatePipelineRun/CreatePipelineRun.js

@@ -617,6 +617,11 @@ class CreatePipelineRun extends React.Component {
                 id: 'dashboard.serviceAccountLabel.optional',
                 defaultMessage: 'ServiceAccount (optional)'
               })}
+              helperText={intl.formatMessage({
+                id: 'dashboard.createPipelineRun.serviceAccountHelperText',
+                defaultMessage:
+                  'Ensure the selected ServiceAccount (or the default if none selected) has permissions for creating PipelineRuns and for anything else your PipelineRun interacts with.'
+              })}
               namespace={namespace}
               selectedItem={
                 serviceAccount

src/containers/CreateTaskRun/CreateTaskRun.js

@@ -699,6 +699,11 @@ class CreateTaskRun extends React.Component {
                 id: 'dashboard.serviceAccountLabel.optional',
                 defaultMessage: 'ServiceAccount (optional)'
               })}
+              helperText={intl.formatMessage({
+                id: 'dashboard.createTaskRun.serviceAccountHelperText',
+                defaultMessage:
+                  'Ensure the selected ServiceAccount (or the default if none selected) has permissions for creating TaskRuns and for anything else your TaskRun interacts with.'
+              })}
               namespace={namespace}
               selectedItem={
                 serviceAccount

src/containers/ImportResources/ImportResources.js

@@ -368,7 +368,7 @@ export class ImportResources extends Component {
                 helperText={intl.formatMessage({
                   id: 'dashboard.importResources.serviceAccount.helperText',
                   defaultMessage:
-                    'The ServiceAccount that the PipelineRun will run under (from the namespace above)'
+                    'The ServiceAccount that the PipelineRun applying resources will run under (from the namespace above). Ensure the selected ServiceAccount (or the default if none selected) has permissions for creating PipelineRuns and for anything else your PipelineRun interacts with, including any Tekton resources in the Git repository.'
                 })}
                 id="import-service-accounts-dropdown"
                 namespace={this.state.importerNamespace}

src/containers/ImportResources/ImportResources.scss

@@ -20,6 +20,15 @@ limitations under the License.
 }
 
 .tkn--importresources-outer {
+
+  .bx--form__helper-text {
+    color: $text-05; // Since by default the contrast/colour choice is barely readable.
+  } 
+
+  .bx--label--disabled {
+    color: $text-05;
+  }
+
   background-color: white;
   min-height: 30rem;
 

src/scss/CreateRun.scss

@@ -18,6 +18,15 @@ limitations under the License.
     margin-bottom: 0;
   }
 
+  .bx--form__helper-text {
+    color: $text-05; // Since by default the contrast/colour choice is barely readable.
+    max-width: 100%;
+  } 
+
+  .bx--label--disabled {
+    color: $text-05;
+  }
+
   .bx--text-input__field-wrapper {
     width: 100%;
   }