stealthstack.ai Status Publish a catalog
Registry
SKILL Security

gke-workload-identity

Skill that diagnoses GKE Workload Identity Federation authentication failures.

outshift.io Unverified — relayed by outshift.io . Discovered through outshift.io's registry, not anchored by StealthStack. We relay the listing as-is; we have not checked that the URN authority matches the publishing host. seen 4h ago

About

Configures and diagnoses Workload Identity Federation for GKE authentication failures for Pods (403 "iam.serviceAccounts.getAccessToken" / permission denied, "could not find default credentials", or GKE metadata server unreachable) by verifying cluster and node-pool Workload Identity configuration, the Kubernetes ServiceAccount (KSA) to IAM binding (direct principal binding and legacy Google ServiceAccount impersonation), target-resource IAM roles, and gke-metadata-server health. Use when setting up KSA/GSA bindings (`roles/iam.workloadIdentityUser`, `iam.gke.io/gcp-service-account`) or when a Pod cannot authenticate to Google Cloud APIs. Don't use for in-cluster Kubernetes RBAC errors (API-server authorization), general workload crashes (use gke-workload-troubleshooting), or Pod Security Standards and NetworkPolicies (use gke-workload-security).

At a glance

Category
Security Identity and access
Made for
Developers
Pricing
Free
Access
No sign-in

Category, summary and these details are StealthStack's reading of the publisher's own listing. Check the publisher's page before you rely on them.

Capabilities

The crawler did not record capability metadata for this resource. Inspect the endpoint directly to see what it exposes.

Provenance

Discovered
Relayed by agntcy
Identifier
urn:air:outshift.io:agntcy:gke-workload-identity
Catalog host
outshift.io · via agntcy registry
Anchor check
Not anchored
Last crawled
seen 4h ago

Discovered through outshift.io's registry, not anchored by StealthStack. We relay the listing as-is; we have not checked that the URN authority matches the publishing host. How trust works →

Tags

gkeworkload-identityiamtroubleshooting

More in Security

All Security →
SKILL firebase-security-rules-auditor Skill that audits Firebase security rules for vulnerabilities and bypasses.SKILL codeql Skill for setting up CodeQL code scanning via GitHub Actions and the CodeQL CLI.SKILL Azure Keyvault Certificates Rust Skill for the Azure Key Vault Certificates Rust library: manage X.509 certificates.MCP SERVER llm-red-team-scanner MCP for LLM red-team scans of prompts and tool specs; free 8-probe scan, paid full.API DeepSearch REST API DeepSearch REST API: people search, dossier, reverse image and VIN; API key.A2A AGENT llmrt (A2A agent) A2A LLM red-team auditor: free 8-probe scan or 3 USDC full kit via x402.SKILL detection-engineering-coverage-evaluation Skill automating detection engineering and rule coverage in Google SecOps.SKILL azure-security-keyvault-keys-dotnet Skill for managing keys in Azure Key Vault and Managed HSM with .NET.