Huy Pham

@grant Any docs/examples on how to do this?

> Do we have a GCF GCP project we can use that won't be deleted? The public project is `fn-img`. Maybe we can create a project in `/dev` for all...

> Are you able to get tests passed locally? Let me know if you need help with debugging the issue. Thanks! This is expected as the version that supports the...

@Smuger I see that the plugin works locally but fails in the MultiKueue environement. This suggests that the manager cluster lacks the permissions to use Workload Identity to authenticate to...

@Smuger Thanks for your patience when we're polishing the documentation for this feature! It's unclear to me what the problem is as your setup looks good to me. A few...

Thanks for sharing! I'll try to reproduce it and get back to you. In the mean time, I used [this](https://github.com/GoogleCloudPlatform/gke-fleet-management/blob/feat/multikueue-clusterprofile/multikueue-clusterprofile/1-infrastructure/main.tf) GKE cluster setup when testing MultiKueue with ClusterProfile and Fleet...

> Hey [@Smuger](https://github.com/Smuger)! > > One thing that might be missing in your setup is that the Connect Gateway API is disabled. I think it's an easy one to miss....

Thanks for confirming. And this is not a silly mistake at all. I'll make sure this is documented in our docs and examples.

Thanks for looking into this! If it's helpful, there's a [secret reader plugin](https://github.com/kubernetes-sigs/cluster-inventory-api/tree/main/cmd/secretreader-plugin) in the cluster-inventory-api repo I think could be used in the e2e tests.

cc @mimowo @zhang-xuebin @knee-berts