apiVersion: v1
kind: ServiceAccount
metadata:
  name: your-service-account
  annotations:
    iam.gke.io/gcp-service-account: plank-${cluster_hash}@${gcp_project_id}.iam.gserviceaccount.com