Authenticating to Google Cloud Firestore from GKE with Workload Identity Authenticating to Google Cloud Firestore from GKE with Workload Identity kubernetes kubernetes