[GCP] Workload Identity Test on GKE Autopilot

gcp_workload_identity_test_on_gke_autopilot.md

https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity?hl=ja

Autopilot では nodeSelector で iam.gke.io/gke-metadata-server-enabled が使えないので、 wi-test.yaml を下記のようにする (Autopilot ではデフォルトで iam.gke.io/gke-metadata-server-enabled は true になっている)

apiVersion: v1
kind: Pod
metadata:
  name: workload-identity-test
  namespace: default
spec:
  containers:
    - image: google/cloud-sdk:slim
      name: workload-identity-test
      command: ["sleep","infinity"]
  serviceAccountName: sql-proxy-account