gke-workload-identity

Configures and diagnoses Workload Identity Federation for GKE authentication failures for Pods (403 "iam.serviceAccounts.getAccessToken" / permission denied, "could not find default credentials", or GKE metadata server unreachable) by verifying cluster and node-pool Workload Identity configuration, the Kubernetes ServiceAccount (KSA) to IAM binding (direct principal binding and legacy Google ServiceAccount impersonation), target-resource IAM roles, and gke-metadata-server health. Use when settin

Install

KitScout test notes

Not tested by KitScout yet. When our harness runs it, pros, cons and the tasks we tried appear here, with the date and evidence.

Similar tools

• wizard 323,485 ★
  Generate an interactive bash wizard that walks a human through steps only they can perform. Use when provision
• cloudflare-api-key-automation 79,395 ★
  Automate Cloudflare API tasks via Rube MCP (Composio). Always search tools first for current schemas.
• cloudflare-automation 79,395 ★
  Automate Cloudflare tasks via Rube MCP (Composio). Always search tools first for current schemas.
• digital-ocean-automation 79,395 ★
  Automate DigitalOcean tasks via Rube MCP (Composio). Always search tools first for current schemas.
• dnsfilter-automation 79,395 ★
  Automate Dnsfilter tasks via Rube MCP (Composio). Always search tools first for current schemas.