- Creates
iam.workloadIdentityUser
bindings for eachIAMServiceAccount
. - Creates
iam.workloadIdentityUser
bindings for each external SA defined in spec. - Annotates KSA that matches with each GSA from internal and external referenced GSA.
apiVersion: my.org.com/v1beta1
kind: WorkloadIdentityUser
metadata: