FreeSkills
Commits, branches and sync with the but CLI
- 361361 downloads
- 198198 likes
- 103103 saves
- Claude Code
- Codex
- Cursor
- and 3 more
Every premium and members-only resource for $9.99/month, as a no-commitment subscription. See the plans
Use this resource to diagnose and set up Pod authentication to Google Cloud with Workload Identity
New
Free
In a terminal, from the folder you want:
npx --yes palatekit@latest install gke-workload-identity-diagnosisWith no option, the skill goes to ~/.agents/skills/; add --agent claude-code (or codex, cursor…) to target an agent.
First time: connect the CLI with
npx --yes palatekit@latest loginThe agent starts from the observed error, such as a 403 on getAccessToken, missing default credentials or an unreachable metadata server. It checks the Workload Identity configuration, the binding between the Kubernetes service account and the Google service account, then the IAM roles on the target resource. You get the diagnosis and fixes to review.
Mostly picked by
Updated November 2, 2026
You say
“My api-worker Pod gets a 403 iam.serviceAccounts.getAccessToken when calling BigQuery: diagnose the binding.”

Skill published by google under the Apache-2.0 license, delivered in its original version.
Listed unmodified
« gke-workload-identity » (google, Apache-2.0) livré dans sa version d'origine : fiche en français et en anglais par PalateKit.
–
No ratings yet
Loading reviews…