apiVersion: v1
kind: ServiceAccount
metadata:
  name: llm-gateway
  namespace: llm-gateway
  labels:
    app: llm-gateway
  annotations:
    # For GKE Workload Identity
    # iam.gke.io/gcp-service-account: llm-gateway@PROJECT_ID.iam.gserviceaccount.com

    # For EKS IRSA (IAM Roles for Service Accounts)
    # eks.amazonaws.com/role-arn: arn:aws:iam::ACCOUNT_ID:role/llm-gateway-role
automountServiceAccountToken: true