skills.rest
openshift-online
openshift-onlineOFFICIAL
Explore all skills by this author →
WebsiteGitHub

gcp-wif-gap

Identify GCP Workload Identity Federation policy gaps between OpenShift versions.

12|Updated Mar 6, 2026
Search Tags:#OpenShift#policy analysis#IAM roles#GCP WIF#service account permissions
One-click install
npx skills add https://github.com/openshift-online/rosa-gap-analysis --skill gcp-wif-gap
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gcp-wif-gap
Source: https://github.com/openshift-online/rosa-gap-analysis/tree/main/skills/gcp-wif-gap
Command: npx skills add https://github.com/openshift-online/rosa-gap-analysis --skill gcp-wif-gap

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires python3, oc, jq, PyYAML, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill identifies GCP Workload Identity Federation (WIF) policy gaps between OpenShift versions, ensuring WIF configurations, IAM roles, and service account permissions are correctly set.

Core Features & Use Cases

  • Policy Gap Analysis: Compare WIF policies, IAM roles, and service account permissions across OpenShift versions.
  • Version Compatibility: Check for compatibility issues with specific OpenShift versions.
  • Automated Reporting: Generate comprehensive reports in HTML and JSON formats.
  • Use Case: Ideal for platform teams during GCP-based upgrades, when investigating WIF permission issues, or for CI/CD pipelines needing to detect policy changes.

Quick Start

Run the gcp-wif-gap skill with the latest stable and candidate OpenShift versions to identify any WIF policy gaps.

Frequently Asked Questions about gcp-wif-gap

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify GCP Workload Identity Federation policy gaps between OpenShift versions?▼

To identify GCP Workload Identity Federation (WIF) policy gaps between OpenShift versions, compare WIF configurations, IAM roles, and service account permissions to detect compatibility issues during upgrades.

How do I validate GCP WIF IAM roles and service account permissions for OpenShift upgrades?▼

Validate GCP WIF IAM roles and service account permissions by comparing policy configurations across different OpenShift versions to ensure WIF settings are correctly applied before upgrading.

Do I need Python and jq to analyze OpenShift WIF policy configurations?▼

Yes, you need Python, jq, and the oc CLI to analyze OpenShift WIF policy configurations, as these tools are required to parse configurations and validate service account permissions.

Can I automate GCP WIF policy analysis reporting for CI/CD pipelines?▼

Yes, you can automate GCP WIF policy analysis reporting for CI/CD pipelines by generating comprehensive HTML and JSON reports to detect policy changes between OpenShift versions.

Why does my GCP Workload Identity Federation setup have permission issues after an OpenShift upgrade?▼

GCP Workload Identity Federation permission issues after an OpenShift upgrade often stem from policy gaps where IAM roles and service account permissions differ between the previous and target versions.

Related Skills

Explore More Software Engineering Skills→
openshift-onlineopenshift-online

prow-autofix

Analyze Prow job failures and create pull requests with generated fixes.

Official
Advanced
openshift-onlineopenshift-online

aws-sts-gap

Compare AWS STS IAM policies between OpenShift versions and generate reports.

Official
Advanced
kcns008kcns008
3

k8s-security

Audit Kubernetes and OpenShift clusters for security posture and compliance.

Community
Advanced
openshift-onlineopenshift-online

fix-prow-failure

Generate fixes for Prow CI validation failures in OpenShift credential policies.

Official
Intermediate