apiVersion: v1
kind: ServiceAccount
metadata:
  name: gke-provider
  labels:
    app: gke-provider
  annotations:
    # This GCP service account and permissions are provisioned in Pulumi https://github.com/tidbcloud/infra-cd/blob/d0afe7f142e57f97bf928059d6913b3dd6322711/gcp-projects.ts#L73-L122
    iam.gke.io/gcp-service-account: dev-gke-provider@pingcap-gardener.iam.gserviceaccount.com