que: How to use Workload Identity Federation when installing idp-scim-sync from SAR

[Hi-Fi]

When making the installan (or update) through SAR, secrets are always asked. According e.g. #99 Workload Identity Federation should be supported, but there doesn't seem to be any documentation how to use it with the service itself.

Of course general instructions are e.g. at https://dwdraju.medium.com/calling-google-cloud-services-from-aws-using-iam-roles-without-gcp-service-account-credentials-af918c05384d, but is there some config required as sync lambda side?