GCS backend only allows short lived token about k8up HOT 1 OPEN

apiVersion: k8up.io/v1
kind: PodConfig
metadata:
  name: podconfig
spec:
  template:
    spec:
      containers:
        - name: backup
          env:
            - name: GOOGLE_APPLICATION_CREDENTIALS
              value: /opt/secret/key.json
      volumes:
        - name: k8up-secrets
          secret:
            secretName: k8up-gcs-key
---
apiVersion: k8up.io/v1
kind: Backup
metadata:
  name: k8up-backup
spec:
  failedJobsHistoryLimit: 1
  successfulJobsHistoryLimit: 1
  backend:
    repoPasswordSecretRef:
      name: k8up-restic
      key: resticPassword
    gcs:
      bucket: secret-k8up-backups
    volumeMounts:
      - name: k8up-secrets
        readOnly: true
        mountPath: /opt/secret
  podConfigRef:
    name: podconfig