gke setting up workload identity
Create your gke cluster using autopilot. It should have workload identity turned on. To determine if your cluster is enabled run the following command: gcloud container clusters describe CLUSTER_NAME --region REGION It should output Create the kubernetes namespace and service account First create namespace and service account kubectl create namespace test kubectl create serviceaccount sa --namespace test Next, create a bucket using gcloud. gcloud storage buckets create gs:// BUCKET Then grant the necessary permission gcloud storage buckets add-iam-policy-binding gs:// BUCKET --role=roles/storage.objectViewer --member=principal://iam.googleapis.com/projects/ project-number /locations/global/workloadIdentityPools/ project-id .svc.id.goog/subject/ns/test/sa/sa --condition=None You can see permission being granted in your bucket Then you can proceed to create the pods that will run the workload identity apiVersion : v1 kind : Pod metadat...