private void addIdentityProvider(ApplicationContainerCluster cluster, List<ConfigServerSpec> configServerSpecs, HostName loadBalancerName,
                                     URI ztsUrl, String athenzDnsSuffix, Zone zone, AthenzDomain domain, AthenzService service) {
        String zoneDnsSuffix = zone.environment().value() + "-" + zone.region().value() + "." + athenzDnsSuffix;
        IdentityProvider identityProvider = new IdentityProvider(domain,
                                                                 service,
                                                                 getLoadBalancerName(loadBalancerName, configServerSpecs),
                                                                 ztsUrl,
                                                                 zoneDnsSuffix,
                                                                 zone);

        // Replace AthenzIdentityProviderProvider
        cluster.removeComponent(ComponentId.fromString("com.yahoo.container.jdisc.AthenzIdentityProviderProvider"));
        cluster.addComponent(identityProvider);

        var serviceIdentityProviderProvider = "com.yahoo.vespa.athenz.identityprovider.client.ServiceIdentityProviderProvider";
        cluster.addComponent(new SimpleComponent(new ComponentModel(serviceIdentityProviderProvider, serviceIdentityProviderProvider, "vespa-athenz")));

        cluster.getContainers().forEach(container -> {
            container.setProp("identity.domain", domain.value());
            container.setProp("identity.service", service.value());
        });
    }
Allocate a container cluster without a nodes tag
config-model/src/main/java/com/yahoo/vespa/model/container/xml/ContainerModelBuilder.java