skills.rest
subimagesec
subimagesecOFFICIAL
Explore all skills by this author →
Website𝕏@subimagesecGitHub

connect-gcp

Connect a Google Cloud organization to SubImage with Workload Identity Federation.

Updated Apr 30, 2026
Search Tags:#gcp#terraform#gcloud#iam#artifact-registry#workload-identity-federation#subimage
One-click install
npx skills add https://github.com/subimagesec/skills --skill connect-gcp
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: connect-gcp
Source: https://github.com/subimagesec/skills/tree/main/plugins/subimage-setup/skills/connect-gcp
Command: npx skills add https://github.com/subimagesec/skills --skill connect-gcp

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill streamlines onboarding a Google Cloud organization, folder, or project into SubImage so the platform can inventory resources, IAM, and container images without manual setup mistakes.

Core Features & Use Cases

  • Workload Identity Federation setup: Creates the Google Cloud pool and AWS provider needed for direct SubImage authentication.
  • Infrastructure as code or CLI paths: Supports both Terraform and gcloud workflows for teams that want reproducible onboarding or a one-off setup.
  • Scoped access and optional coverage: Grants the required IAM roles, enables needed APIs, and can extend scanning to Artifact Registry and other optional collectors.
  • Use Case: A cloud security engineer can use this Skill to connect a new Google Cloud tenant to SubImage, choose org or project scope, and configure scanning in the same repo where infrastructure changes are managed.

Quick Start

Ask me to generate the Terraform or gcloud steps for connecting your Google Cloud organization to SubImage, and include your org ID, host project, SubImage tenant account ID, tenant ID, and desired scope.

Frequently Asked Questions about connect-gcp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I connect a Google Cloud organization to SubImage for inventory scanning?▼

Set up Workload Identity Federation to connect GCP to SubImage for secure inventory scanning. You need a host project, organization ID, and SubImage tenant identifiers to establish the authentication pool and provider.

Can I use Terraform to automate GCP onboarding to SubImage?▼

Yes, Terraform automates GCP onboarding to SubImage by applying Workload Identity Federation and IAM roles as code. This supports reproducible infrastructure changes alongside your existing Terraform workflows.

What IAM roles and APIs are required to set up Workload Identity Federation for SubImage?▼

Setting up Workload Identity Federation for SubImage requires specific IAM roles and API enablement on your host project. The Skill applies these scoped access permissions to enable secure authentication and resource inventory.

Does SubImage scanning support Google Cloud Artifact Registry?▼

Yes, SubImage scanning supports Google Cloud Artifact Registry as an optional configuration. You can extend your onboarding workflow to include container image scanning alongside standard resource and IAM inventory.

Can I scope SubImage onboarding to a specific GCP folder or project instead of the entire organization?▼

Yes, you can scope SubImage onboarding to a specific GCP folder or project. The Skill supports organization, folder, or project-level onboarding workflows to apply selective sync configuration and scoped IAM access.

Related Skills

Explore More Software Engineering Skills→
tomztomz

gcp-security

Apply IAM, secrets, and policy controls to close GCP security gaps.

Community
Advanced
Hack23Hack23
235

aws-cloudwatch-monitoring

Automate CloudWatch metrics, alarms, dashboards, and log insights for AWS services.

Official
Advanced
ginkidaginkida
20

gcp

Design secure, scalable Google Cloud Platform infrastructure using gcloud CLI and Terraform.

Community
Advanced
googlegoogle
17.1k

cloud-sql-basics

Manage Cloud SQL instances and databases using gcloud CLI and Terraform.

Official
Advanced