apiVersion: v1
kind: ServiceAccount
metadata:
  name: es
  namespace: external-secrets
  annotations:
    iam.gke.io/gcp-service-account: external-secret-operator@pingcap-dbaas-build.iam.gserviceaccount.com