Skip to content
gke-workload-identity

Self-hosted alternatives to gke-workload-identity

5 self-hosted AI Skills apps to use instead, best rated first.

Top picks

  1. C

    claude-to-deerflow

    Get

    claude-to-deerflow is an agent skill that lets an assistant send messages and questions to a running DeerFlow instance through its HTTP API. DeerFlow is an AI agent platform built on LangGraph that orchestrates sub-agents for research, code

    Self-hosted

  2. O

    open-notebook

    Get

    open-notebook is an agent skill for organising research with Open Notebook, a self-hosted alternative to NotebookLM. It arranges sources, notes and AI conversations into research notebooks. Sources can be PDFs, web pages, audio, video and O

    Self-hosted

  3. R

    Reactive Resume

    Get

    Reactive Resume is a free and open-source resume builder for writing resumes and cover letters, checking the work, and tracking job applications. You create a free account, import an existing resume or start from scratch, and see the finish

    Open sourceSelf-hosted

  4. S

    self-hosted-funnel-launch

    Get

    Self-hosted funnel launch is an agent skill that takes a funnel from an empty install to published on infrastructure you control, using the Autonnel funnel builder, which is licensed Apache-2.0. The result covers a landing page, checkout, a

    Self-hosted

  5. G

    get-convex/convex-backend

    Get

    Convex is an open-source reactive database for web app developers. It combines a database, a place to write server functions in pure TypeScript, and client libraries that keep the app's data live, so screens update as the data changes. Beca

    Self-hosted

About gke-workload-identity

G

gke-workload-identity

Configures and diagnoses Workload Identity Federation

GKE Workload Identity troubleshooting is an agent skill for finding out why a Pod running on Google Kubernetes Engine cannot authenticate to Google Cloud APIs when it uses Workload Identity Federation. It is built around the symptoms people usually report: HTTP 403 errors that mention the iam.serviceAccounts.getAccessToken permission being denied, errors saying default credentials cannot be found or that the metadata server cannot be reached, and API calls that unexpectedly run as the node's default Compute Engine service account instead of the identity assigned to the workload. The skill follows a read-only boundary, which means it inspects the configuration and proposes fixes rather than changing live resources itself. It also covers configuring Workload Identity Federation for GKE, not only diagnosing failures. Its routing notes send cluster-level security flags to a separate platform security skill. It is aimed at developers and platform engineers who need an application to reach Google Cloud services without storing keys. It is published by Google on skills.sh under the google skills repository, with about 1.6K installs. The skills.sh listing shows Gen Agent Trust Hub, Socket and Snyk all passing.

Price
Free
Made by
google
Category
AI Skills
Website
github.com/google/skills/gke-workload-identity