Kill Your Service Account Keys: Secure GitLab CI/CD on Google Cloud

https://cervesato.it/posts/killing-service-account-keys/