+ + *Option 1:* Set +service_account with the service account JSON (raw JSON, not a string), +and CircleCI will create the secret for you. + + *Option 2:* Leave +the service_account field as its default, and create the secret +yourself. CircleCI will assume it exists. + + *...