Is the SpiceDBCluster Config field (https://github.com/authzed/spicedb-operator/blob/715aed2a67d4b4596373f019642fa0ac89addad8/pkg/apis/authzed/v1alpha1/types.go#L83-L88) just a SpiceConfig object (https://github.com/authzed/spicedb-operator/blob/715aed2a67d4b4596373f019642fa0ac89addad8/pkg/config/config.go#L137-L161) ? I'm wondering if all the same fields are permitted. Not all of these are listed in the docs, e.g. extraServiceAccountAnnotations is not in https://authzed.com/docs/spicedb/operator#flags

Yes, exactly that - the string values here are the keys you'd use in the kube yaml: https://github.com/authzed/spicedb-operator/blob/main/pkg/config/config.go#L58-L88 The operator docs on the website are a little out of date, we'll get those updated