Status: IN
`principal://` references a single IAM resource; `principalSet://` references a set of resources (namespace, cluster) in Workload Identity Federation.
Source: entries/2026/03/10/gke-workload-identity.md
JSON