fix: check to see if we already have a SA for the project

lib/reconcile.js

@@ -138,6 +138,18 @@ module.exports = function (clusterInfo, uuid = require('uuid')) {
 
     const { common, cluster, tokens } = inputSettings
 
+    if (!cluster.credentials) {
+      try {
+        // see if we already have a SA for this project
+        const email = `${common.projectId}-k8s-sa@${common.projectId}.iam.gserviceaccount.com`
+        const creds = await clusterInfo.getServiceAccount(email)
+        if (creds) cluster.credentials = creds
+        log.info('reusing existing service account for the project')
+      } catch (e) {
+        log.error(e.stack)
+      }
+    }
+
     if (typeof common.credentials === 'string') {
       common.credentials = JSON.parse(common.credentials)
     }
@@ -197,6 +209,8 @@ module.exports = function (clusterInfo, uuid = require('uuid')) {
 
     const { environment = 'production' } = cluster
 
+    delete cluster.operation
+
     const commonKeys = Object.keys(cluster).filter(key => {
       return (cluster[key] === tokens[key] || fastDeepEqual(cluster[key], tokens[key]))
     })