Status: IN
Same namespace + service account name across GKE clusters in the same project results in the same IAM identity; mitigate with separate projects or distinct namespace names.
Source: entries/2026/03/10/gke-workload-identity.md
JSON