apiVersion: v1
kind: ServiceAccount
metadata:
  name: ticdc-service
  annotations:
    iam.gke.io/gcp-service-account: prod-gke-provider@dbaas-prod.iam.gserviceaccount.com