apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - manifests.yaml commonAnnotations: cnrm.cloud.google.com/project-id: ${gcp_project_id} components: - ../base replacements: - source: kind: IAMServiceAccount options: create: true targets: - fieldPaths: - spec.serviceAccountRef.name select: kind: IAMServiceAccountKey