Checklist

• I did not find a related open enhancement request.
• I understand that enhancement requests filed in the GitHub repository are by default low priority.
• If this request is time-sensitive, I have submitted a corresponding issue with GCP support.

Describe the feature or resource

Hi,
I would like to be able to reference to the status.serviceAccountEmailAddress fields of an SQLInstance in an IAM policy. This way we can create an IAMPolicy on for example a Storagebucket, so the SQL Instance can write database exports to the bucket.

In the current situation, we need to first deploy the SQLInstance, wait for the status to be filled with the actual value, read that value, craft it into an IAM Policy resource, and apply that.

That's not very declarative - and I would really like this to be declarative as possible.

A possible layout for the adjusted memberFrom part could be:

memberFrom:
  sqlInstanceRef:
    name: <instance-name>
    namespace: <instance-namespace>

just like the existing:

memberFrom:
  serviceAccountRef:
    name: <sa-name>
    namespace: <sa-namespace>

Additional information

No response

Importance

To make the usage of KCC resources fully declarative, this change would be needed.