I Built the Same Kubernetes Platform on AWS, Azure, and GCP. GCP Was the Weird One.

GitHub Actions does not do kubectl apply workloads—Argo CD does. OIDC → Workload Identity Federation replaces long-lived GCP keys.