Lightlines
By google

gke-workload-identity

google1.5k installs

Find why your GKE Pods cannot authenticate.

What it does

Diagnoses Pod authentication failures in GKE and proposes fixes for a human to apply.

When to use it

Use when setting up workload identity bindings or diagnosing a Pod that cannot authenticate to Google Cloud APIs.

How to use it

Give it a failing Pod; it returns a diagnosis with evidence and proposed remediation commands for a human to apply.

What you provide

  • the failing Pod

Uses

Latest review

What you need · 3

Requires the Google Cloud CLI to inspect project information, cluster configuration, node pools, and IAM policies.

Requires kubectl to inspect the affected Pod, its node, service accounts, and logs.


Access · 5

This skill

GKE

Read

Inspects your GKE workload configuration

IAM

Read

Checks service account IAM bindings