Find why your GKE Pods cannot authenticate.
Diagnoses Pod authentication failures in GKE and proposes fixes for a human to apply.
When to use it
Use when setting up workload identity bindings or diagnosing a Pod that cannot authenticate to Google Cloud APIs.
Give it a failing Pod; it returns a diagnosis with evidence and proposed remediation commands for a human to apply.
What you provide
Requires the Google Cloud CLI to inspect project information, cluster configuration, node pools, and IAM policies.
Requires kubectl to inspect the affected Pod, its node, service accounts, and logs.
This skill
GKE
Inspects your GKE workload configuration
IAM
Checks service account IAM bindings