Configures and diagnoses Workload Identity Federation for GKE authentication failures for Pods (403 "iam.serviceAccounts.getAccessToken" / permission denied, "could not find default credentials", or GKE metadata server unreachable) by verifying cluster and node-pool Workload Identity configuration, the Kubernetes ServiceAccount (KSA) to IAM binding (direct principal binding and legacy Google…
安装
npx skills add google/skills --skill gke-workload-identitynpx skills add google/skills --skill gke-workload-identity -a claude-code -gnpx skills add google/skills --skill gke-workload-identity -a codex -ggemini skills install https://github.com/google/skills.git --path skills/cloud/gke-workload-identitygh skill install google/skills gke-workload-identitygit clone --depth 1 https://github.com/google/skills /tmp/google__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/google__skills/skills/cloud/gke-workload-identity ~/.claude/skills/gke-workload-identity # Claude Code
cp -R /tmp/google__skills/skills/cloud/gke-workload-identity ~/.agents/skills/gke-workload-identity # Codex, Cursor, Gemini CLI, Copilot, OpenCode