Determine if “Disable Workload Identity Cluster Creation” policy is enforced at the GCP organization level.
To have a better control over service account access, make sure that GKE clusters have Workload Identity feature disabled at the time of creation.
Ensure that “Disable Workload Identity Cluster Creation” constraint is enforced at the organization level.