apiVersion: v1
kind: ServiceAccount
metadata:
  annotations:
    azure.workload.identity/client-id: AZURE_WORKLOAD_IDENTITY_CLIENT_ID
  name: cluster-controller