User Story:

As an installer user, I want to be able to:

• authenticate with a service account when running on a GCP VM

so that I 

• don't have to download a service account file

Acceptance Criteria:

Description of criteria:

• Must authenticate the google sdk and terraform
• no longer requires service account
• gracefully handles cluster secret for cco in this case

(optional) Out of Scope:

Detail about what is specifically not being delivered in the story

Engineering Details:

• https://registry.terraform.io/providers/hashicorp/google/latest/docs/guides/provider_reference#authentication

This requires/does not require a design proposal.
This requires/does not require a feature gate.