Merge pull request #83906 from jeana-redhat/OSDOCS-12394-gcp-svc-acct-limitation

OSDOCS-12394: GCP machineset single svc acct limit

Author: jeana-redhat

modules/cpmso-yaml-provider-spec-gcp.adoc

@@ -67,7 +67,7 @@ spec:
               subnetwork: <cluster_id>-master-subnet
             projectID: <project_name> <4>
             region: <region> <5>
-            serviceAccounts:
+            serviceAccounts: <6>
             - email: <cluster_id>-m@<project_name>.iam.gserviceaccount.com
               scopes:
               - https://www.googleapis.com/auth/cloud-platform
@@ -77,8 +77,8 @@ spec:
             targetPools:
             - <cluster_id>-api
             userDataSecret:
-              name: master-user-data <6>
-            zone: "" <7>
+              name: master-user-data <7>
+            zone: "" <8>
 ----
 <1> Specifies the secret name for the cluster. Do not change this value.
 <2> Specifies the path to the image that was used to create the disk.
@@ -93,5 +93,6 @@ To use a GCP Marketplace image, specify the offer to use:
 <3> Specifies the cloud provider platform type. Do not change this value.
 <4> Specifies the name of the GCP project that you use for your cluster.
 <5> Specifies the GCP region for the cluster.
-<6> Specifies the control plane user data secret. Do not change this value.
-<7> This parameter is configured in the failure domain, and is shown with an empty value here. If a value specified for this parameter differs from the value in the failure domain, the Operator overwrites it with the value in the failure domain.
+<6> Specifies a single service account. Multiple service accounts are not supported. 
+<7> Specifies the control plane user data secret. Do not change this value.
+<8> This parameter is configured in the failure domain, and is shown with an empty value here. If a value specified for this parameter differs from the value in the failure domain, the Operator overwrites it with the value in the failure domain.

modules/machineset-yaml-gcp.adoc

@@ -106,7 +106,7 @@ endif::infra[]
             subnetwork: <infrastructure_id>-worker-subnet
           projectID: <project_name> <5>
           region: us-central1
-          serviceAccounts:
+          serviceAccounts: <6>
           - email: <infrastructure_id>-w@<project_name>.iam.gserviceaccount.com
             scopes:
             - https://www.googleapis.com/auth/cloud-platform
@@ -116,7 +116,7 @@ endif::infra[]
             name: worker-user-data
           zone: us-central1-a
 ifdef::infra[]
-      taints: <6>
+      taints: <7>
       - key: node-role.kubernetes.io/infra
         effect: NoSchedule
 endif::infra[]
@@ -139,8 +139,9 @@ To use a GCP Marketplace image, specify the offer to use:
 --
 <4> Optional: Specify custom metadata in the form of a `key:value` pair. For example use cases, see the GCP documentation for link:https://cloud.google.com/compute/docs/metadata/setting-custom-metadata[setting custom metadata].
 <5> For `<project_name>`, specify the name of the GCP project that you use for your cluster.
+<6> Specifies a single service account. Multiple service accounts are not supported.
 ifdef::infra[]
-<6> Specify a taint to prevent user workloads from being scheduled on infra nodes.
+<7> Specify a taint to prevent user workloads from being scheduled on infra nodes.
 +
 [NOTE]
 ====