apiVersion: v1
kind: ServiceAccount
metadata:
  name: cluster-control-server
  annotations:
    iam.gke.io/gcp-service-account: prod-cluster-server@dbaas-prod.iam.gserviceaccount.com