Add support for GKE Workload Identity
In order to use something like Google Cloud Secret Manager, you need to first authenticate with Google Cloud, which means passing in those credentials via CI/CD Variables as an Environment variable.
GKE has "Workload Identity" which allows you to automatically inject your Google Cloud credentials into pods.
The problem is, you need to create a service-account within a deployed namespace and annotate that service-account, which doesn't happen via AutoDevops.
https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity
Activity
Creating a service account as part of the deploy job (and make the deployment run under that service account) is also required to associate IAM roles to pods on an AWS EKS cluster (see https://docs.aws.amazon.com/eks/latest/userguide/iam-roles-for-service-accounts.html).
mentioned in merge request !192 (merged)
mentioned in commit 014a7c97
closed with merge request !192 (merged)
