メニュー
Deploy and manage containerized workloads on Cloud Run. Covers service creation, traffic splitting, IAM, VPC connectivity, secrets integration, auto-scaling, and gcloud CLI patterns. Warns before billable deployments.
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
SOC 職業分類に基づく
Configure, install, and maintain Google-managed and self-hosted MCP servers for GCP. Covers setup, auth (ADC and SA key), capability map, troubleshooting, and version tracking. Every MCP entry includes a gcloud CLI fallback.
100% Google Cloud focused architect. Receives the GCP-scoped portion of the solution-designer HLD. Design-first: generates GCP-specific HLD and LLD, authors GCP ADRs, enforces the GCP design gate. Aware of all GCP repos, examples, patterns, policies, principles, MCPs, and the Well-Architected Framework. Does not make vendor-selection decisions — those belong to solution-designer.
Configure observability on GCP using Cloud Logging, Cloud Monitoring, Cloud Trace, and Cloud Profiler. Covers log sinks, log-based metrics, alerting policies, dashboards, and uptime checks. Owns the operational readiness evidence for gcp-ops.
Deploy and manage Kubernetes workloads on Google Kubernetes Engine (GKE). Covers Autopilot and Standard modes, Workload Identity, node pool management, networking, security, and gcloud/kubectl CLI patterns. Warns before cluster creation (billable).
Design and manage GCP networking: VPC, subnets, firewall rules, Cloud Load Balancing, Cloud Armor, Private Google Access, and Shared VPC. Deny-by-default firewall posture. Warns before creating external load balancers (billable).
Agentic systems architect for the Gemini Enterprise Agent Platform (GEAP, formerly Vertex AI). Tier 2 specialist alongside gcp-architect: owns agentic application design AND agent evaluation execution. Covers ADK, Agent Runtime (formerly Agent Engine), the MCP/A2A/AP2 protocol stack, multi-agent topologies, grounding/RAG, memory, human-in-the-loop, and Gemini model selection. GCP is always the target deployment platform.
| name | cloud-run |
| description | Deploy and manage containerized workloads on Cloud Run. Covers service creation, traffic splitting, IAM, VPC connectivity, secrets integration, auto-scaling, and gcloud CLI patterns. Warns before billable deployments. |
| version | 0.1 |
| triggers | ["deploy to cloud run","create cloud run service","cloud run","serverless container","scale cloud run","cloud run IAM","cloud run VPC","cloud run secrets","gcloud run"] |
| required_scopes | ["run.services.create","run.services.delete","run.services.get","run.services.list","run.services.update","run.routes.invoke"] |
| mcp_servers | ["google-cloud-run"] |
Deploy and manage containerized applications on Google Cloud Run — fully managed, serverless, and scales to zero.
gcloud CLI authenticated (gcloud auth login or ADC)gcloud config set project PROJECT_IDgcloud services enable run.googleapis.com# Billable action — confirm before running
gcloud run deploy SERVICE_NAME \
--image IMAGE_URI \
--region REGION \
--platform managed \
--no-allow-unauthenticated
gcloud run services add-iam-policy-binding SERVICE_NAME \
--region REGION \
--member="serviceAccount:SA@PROJECT.iam.gserviceaccount.com" \
--role="roles/run.invoker"
gcloud run services update SERVICE_NAME \
--vpc-connector CONNECTOR_NAME \
--region REGION
gcloud run services update SERVICE_NAME \
--set-secrets=/path/to/secret=SECRET_NAME:latest \
--region REGION
--allow-unauthenticated without explicit intent and gcp-security sign-off--no-allow-unauthenticated as the default