apiVersion: v1
kind: ServiceAccount
metadata:
  name: wireguardctl
  namespace: vpn
  annotations:
    iam.gke.io/gcp-service-account: wireguardctl-gcp-sa@${gcp_project_id}.iam.gserviceaccount.com