Configures and diagnoses Workload Identity Federation for GKE authentication failures for Pods (403 "iam.serviceAccounts.getAccessToken" / permission denied, "could not find default credentials", or GKE metadata server unreachable) by verifying cluster and node-pool Workload Identity configuration, the Kubernetes…
Configures alerting policies in Terraform for Google Kubernetes Engine (GKE) clusters, workloads, and services using PromQL and Google Cloud Managed Service for Prometheus. Use when writing, analyzing, validating, or deploying Terraform alerting policies to monitor GKE service latency, traffic, error rates using…
Establish whether an out-of-band change to a live object is load-bearing — whether the state the manifests declare would still run if the change were undone — before recommending a revert. Read-only. For drift triage, emergency hotfixes found in a cluster, and any decision between a declared state and a live one.
Installs or upgrades a third-party Helm chart (cert-manager, ingress-nginx, external-dns, an operator) on a cluster by adding it to the GitOps repository in the form the repository's reconciler already syncs: an Argo CD Application, a Flux HelmRelease, a Config Sync RootSync, or kustomize helmCharts. Opens one pull…
File a bug report, feature request, or question about kube-agents itself on the user's behalf, through the project's public feedback form, exactly once, after the user has confirmed the exact text in chat. A submission becomes a public GitHub issue on gke-labs/kube-agents. Not for telling a user where to report — the…
Writes Terraform (HCL) for Google Cloud resource changes and hands them to submit-suggestion as one pull request, on an install whose GitOps repository keeps clusters/ /provisioning/ (or its Terraform root) as HCL. Use when a request creates or changes a GKE cluster or node pool (new cluster, grow, autoscale, adopt)…
Compose the upgrade readiness brief on request — which upgrade readiness findings need the user's decision now, what else the week found, and where the full report is — from the Saturday review's record and the findings queue, in the brief's fixed shape. Never the readiness table, never a summary of the report, never…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: