GoogleEmail returns the Google service account email from the same annotation used in native GCP Workload Identity Federation for GKE.

ReferenceFromNode returns a ServiceAccount reference from the Node object annotations or labels.

ReferenceFromObject returns a ServiceAccount reference from a ServiceAccount object.

ReferenceFromPod returns a ServiceAccount reference from a Pod object.

ReferenceFromToken returns a ServiceAccount reference from a ServiceAccount Token.