You are creating and running containers across different projects in Google Cloud. The application you are developing needs to access Google Cloud services from within Google Kubernetes Engine (GKE). What should you do?

A. Assign a Google service account to the GKE nodes. B. Use a Google service account to run the Pod with Workload Identity. C. Store the Google service account credentials as a Kubernetes Secret. D. Use a Google service account with GKE role-based access control (RBAC).