To remediate CSPM vulnerabilities by changing the default service account.

[shubhamperforce]

To remediate CSPM vulnerabilities by changing the default service account.

The following are the GKE default labels that we cannot modify. These are automatically set by GKE and will cause errors if added manually. Do NOT reuse system-managed labels like:

[cloud.google.com/gke-nodepool](http://cloud.google.com/gke-nodepool)
[kubernetes.io/hostname](http://kubernetes.io/hostname)
[topology.gke.io/zone](http://topology.gke.io/zone)
[node.kubernetes.io/instance-type](http://node.kubernetes.io/instance-type)

We need to create our own custom labels, like the one below. This will help us with future maintenance or changes.

nodeSelector:
  role: jenkins-runner

https://perforce.atlassian.net/browse/P4DEVOPS-7398