Please enable OIDC so that GCP service account impersonation can be done in our pipelines