Tracing permissions issues when service_account_key specified

Hello,
I am having issues in GKE environment with workload identity enabled.
image: gcr.io/endpoints-release/endpoints-runtime:2.34.0

I am using a provided service account through --service_account_key parameter which has owner permissions in a project

Endpoints reporting works fine however tracing keeps throwing errors
`BatchWriteSpans failed (1 spans, 769 bytes): PERMISSION_DENIED: The caller does not have permission`

I have tried querying metadata server and it lists workload identity service accounts


Seems like reporting works through specified service account, however tracing use workload identity. Is that an expected behavior?

My expectation is: when a service account key is defined, both endpoints reporting and tracing works through the same specified service account.