diff --git a/modules/gke-cluster/main.tf b/modules/gke-cluster/main.tf
index 03e6c394..f55f46e8 100644
--- a/modules/gke-cluster/main.tf
+++ b/modules/gke-cluster/main.tf
@@ -198,7 +198,7 @@ resource "google_container_cluster" "cluster" {
   }
 
   dynamic "gateway_api_config" {
-    for_each = var.enable_features.gateway_api ?  [""] : []
+    for_each = var.enable_features.gateway_api ? [""] : []
     content {
       channel = "CHANNEL_STANDARD"
     }
diff --git a/modules/project/service-accounts.tf b/modules/project/service-accounts.tf
index b25c6126..1979958b 100644
--- a/modules/project/service-accounts.tf
+++ b/modules/project/service-accounts.tf
@@ -45,6 +45,8 @@ locals {
     # TODO: jit?
     gke-mcs                  = "service-%s@gcp-sa-mcsd"
     monitoring-notifications = "service-%s@gcp-sa-monitoring-notification"
+    multicluster-ingress     = "service-%s@gcp-sa-multiclusteringress"
+    multicluster-discovery   = "service-%s@gcp-sa-mcsd"
     notebooks                = "service-%s@gcp-sa-notebooks"
     pubsub                   = "service-%s@gcp-sa-pubsub"
     secretmanager            = "service-%s@gcp-sa-secretmanager"
@@ -73,6 +75,7 @@ locals {
     "artifactregistry.googleapis.com",
     "cloudasset.googleapis.com",
     "gkehub.googleapis.com",
+    "multiclusteringress.googleapis.com",
     "pubsub.googleapis.com",
     "secretmanager.googleapis.com",
     "sqladmin.googleapis.com",