apiVersion: iam.cnrm.cloud.google.com/v1beta1
kind: IAMServiceAccount
metadata:
  name: external-secrets
spec:
  displayName: ${cluster_hash} external-secrets
  resourceID: ext-sec-${cluster_hash}