# Purpose: Defines the IAM identity for all pods
apiVersion: v1
kind: ServiceAccount
metadata:
  name: llm-trace-langfuse-svc  # ← Referenced by all deployments
  annotations:
    iam.gke.io/gcp-service-account: 'xdev-llm-trace-langfuse-svc@xhr-development.iam.gserviceaccount.com'
    argocd.argoproj.io/sync-wave: "-5"  # ← Deploys first