Menu
Deploy and manage containerized workloads on Cloud Run. Covers service creation, traffic splitting, IAM, VPC connectivity, secrets integration, auto-scaling, and gcloud CLI patterns. Warns before billable deployments.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Configure, install, and maintain Google-managed and self-hosted MCP servers for GCP. Covers setup, auth (ADC and SA key), capability map, troubleshooting, and version tracking. Every MCP entry includes a gcloud CLI fallback.
100% Google Cloud focused architect. Receives the GCP-scoped portion of the solution-designer HLD. Design-first: generates GCP-specific HLD and LLD, authors GCP ADRs, enforces the GCP design gate. Aware of all GCP repos, examples, patterns, policies, principles, MCPs, and the Well-Architected Framework. Does not make vendor-selection decisions — those belong to solution-designer.
Configure observability on GCP using Cloud Logging, Cloud Monitoring, Cloud Trace, and Cloud Profiler. Covers log sinks, log-based metrics, alerting policies, dashboards, and uptime checks. Owns the operational readiness evidence for gcp-ops.
Deploy and manage Kubernetes workloads on Google Kubernetes Engine (GKE). Covers Autopilot and Standard modes, Workload Identity, node pool management, networking, security, and gcloud/kubectl CLI patterns. Warns before cluster creation (billable).
Design and manage GCP networking: VPC, subnets, firewall rules, Cloud Load Balancing, Cloud Armor, Private Google Access, and Shared VPC. Deny-by-default firewall posture. Warns before creating external load balancers (billable).
Agentic systems architect for the Gemini Enterprise Agent Platform (GEAP, formerly Vertex AI). Tier 2 specialist alongside gcp-architect: owns agentic application design AND agent evaluation execution. Covers ADK, Agent Runtime (formerly Agent Engine), the MCP/A2A/AP2 protocol stack, multi-agent topologies, grounding/RAG, memory, human-in-the-loop, and Gemini model selection. GCP is always the target deployment platform.
| name | cloud-run |
| description | Deploy and manage containerized workloads on Cloud Run. Covers service creation, traffic splitting, IAM, VPC connectivity, secrets integration, auto-scaling, and gcloud CLI patterns. Warns before billable deployments. |
| version | 0.1 |
| triggers | ["deploy to cloud run","create cloud run service","cloud run","serverless container","scale cloud run","cloud run IAM","cloud run VPC","cloud run secrets","gcloud run"] |
| required_scopes | ["run.services.create","run.services.delete","run.services.get","run.services.list","run.services.update","run.routes.invoke"] |
| mcp_servers | ["google-cloud-run"] |
Deploy and manage containerized applications on Google Cloud Run — fully managed, serverless, and scales to zero.
gcloud CLI authenticated (gcloud auth login or ADC)gcloud config set project PROJECT_IDgcloud services enable run.googleapis.com# Billable action — confirm before running
gcloud run deploy SERVICE_NAME \
--image IMAGE_URI \
--region REGION \
--platform managed \
--no-allow-unauthenticated
gcloud run services add-iam-policy-binding SERVICE_NAME \
--region REGION \
--member="serviceAccount:SA@PROJECT.iam.gserviceaccount.com" \
--role="roles/run.invoker"
gcloud run services update SERVICE_NAME \
--vpc-connector CONNECTOR_NAME \
--region REGION
gcloud run services update SERVICE_NAME \
--set-secrets=/path/to/secret=SECRET_NAME:latest \
--region REGION
--allow-unauthenticated without explicit intent and gcp-security sign-off--no-allow-unauthenticated as the default