apiVersion: v1
kind: ConfigMap
metadata:
  name: migrate-server-gcp-credential
  namespace: infra
data:
  credential.json: |
    {
      "type": "external_account",
      "audience": "//iam.googleapis.com/projects/27323915999/locations/global/workloadIdentityPools/dev-dbaas/providers/dev-dbaas-eks-oidc",
      "subject_token_type": "urn:ietf:params:oauth:token-type:jwt",
      "token_url": "https://sts.googleapis.com/v1/token",
      "credential_source": {
        "file": "/var/run/cloud.google.com/token",
        "format": {
          "type": "text"
        }
      },
      "service_account_impersonation_url": "https://iamcredentials.googleapis.com/v1/projects/-/serviceAccounts/dev-migrate-server@pingcap-gardener.iam.gserviceaccount.com:generateAccessToken"
    }