<p>I am deploying a Spring Boot application inside a Kubernetes pod on Google Cloud Platform.</p>

<p>I don't want to use the Compute Engine default service account in our pod.</p>

<p>How and where can we specify a Google service account for our pod?</p>

Harold L. Brown
<p>Harold's suggestion to configure service account credentials in the pod as a secret is good and has been the recommended method for quite a while now. However, Google recently introduced <a href="https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity" rel="nofollow noreferrer">Workload Identity</a> which allows you to link a k8s service account with a GCP IAM service account, you can then have your pod run with said k8s service account and use the IAM permissions that go with it</p>
