Clarify GCP service account and secret creation
I got tripped up on the name of the secret (my key name was incorrect). This might help
@@ -5,3 +5,15 @@ This is an example demonstrating:
* **building** a single Go file app and with a single stage `Dockerfile` using [kaniko](https://github.com/GoogleContainerTools/kaniko) to build on a K8S cluster
* **tagging** using the default tagPolicy (`gitCommit`)
* **deploying** a single container pod using `kubectl`
+
+### GCP
+
+If you are on GCP, create a [Service Account](https://cloud.google.com/iam/docs/understanding-service-accounts) for Kaniko that has permissions to pull and push images to gcr.io. If your build context uses a `gcsBucket` the service account must also have read and write permissions for the bucket.
+
+Download the json service account file, rename the file to `kaniko-secret` (do not append .json to the filename) and create a Kubernetes secret using the following example:
+
+```
+kubectl create secret generic kaniko-secret --from-file=kaniko-secret
+```
+
+Note the name of the secret *AND* the key must be `kaniko-secret`
