apiVersion: v1
kind: ServiceAccount
metadata:
  name: gke-provider
  labels:
    app: gke-provider
  annotations:
    # This GCP service account and permissions need to be provisioned in Pulumi
    iam.gke.io/gcp-service-account: staging-gke-provider@pingcap-gardener.iam.gserviceaccount.com