The upgrade of fog-google in
https://gitlab.com/gitlab-org/gitlab/-/merge_requests/46648 enabled the
use of Google default service accounts. This documents how to use this
and what permissions to check.