diff --git a/examples/kaniko/README.md b/examples/kaniko/README.md
index c88f8483535..849b63eaa3b 100644
--- a/examples/kaniko/README.md
+++ b/examples/kaniko/README.md
@@ -5,3 +5,15 @@ This is an example demonstrating:
 * **building** a single Go file app and with a single stage `Dockerfile` using [kaniko](https://github.com/GoogleContainerTools/kaniko) to build on a K8S cluster
 * **tagging** using the default tagPolicy (`gitCommit`)
 * **deploying** a single container pod using `kubectl`
+
+### GCP 
+
+If you are on GCP, create a [Service Account](https://cloud.google.com/iam/docs/understanding-service-accounts) for Kaniko that has permissions to pull and push images to gcr.io. If your build context uses a `gcsBucket` the service account must also have read and write permissions for the bucket. 
+
+Download the json service account file, rename the file to `kaniko-secret` (do not append .json to the filename) and create a Kubernetes secret using the following example:
+
+```
+kubectl create secret generic kaniko-secret --from-file=kaniko-secret
+```
+
+Note the name of the secret *AND* the key must be `kaniko-secret`