trying to figure out how to enable workload identity when a cluster is created

figured it out, the workload pool is: <project_id>.svc.id.goog

from the docs: https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity#enable