Stan Hu authored May 02, 2024 and Achilleas Pipinellis committed May 02, 2024

Prevously gsutil would require backup credentials be specified in a
Kubernetes secret, but this requires configuring a secret.
This does not allow a service account tied to the node or the cluster
from being used.

`GOOGLE_APPLICATION_CREDENTIALS` is configured by the Chart to specify
the location of the backup credentials. If this file does not exist,
we tell `gsutil` to obtain a token via the default service account by
a config parameter in `.boto`. This enables backups to work with GKE
Workload Identity Federation.

Relates to #3434

Changelog: added