service_account_manager:
  cluster:
    - "manage_service_account"
