菜单
Plans, creates, and configures production-ready Google Kubernetes Engine (GKE) clusters using the golden path Autopilot configuration. Covers networking, security, observability, scaling, cost optimization, and AI/ML inference on GKE.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Persistent dietary safety layer for DoorDash CLI (dd-cli) ordering. Stores a personal/household dietary profile (allergens with severity tiers, diets, dislikes) that every cart is vetted against before checkout, with a deterministic tripwire — the vetting step saves the full cart contents to a vetted-cart dump, and a PreToolUse hook re-greps that dump against the anaphylaxis-severity allergen list before any checkout URL is allowed. Use when the user mentions allergies or dietary restrictions, when ordering food for someone with restrictions, or on every dd-cli cart flow while this skill is installed. A tripwire, not medical-grade — the human checkout page is the final check.
Group food ordering through the DoorDash CLI (dd-cli) from a persistent team roster. One request ("lunch for the team") fans out into a single merged cart with every line attributed to its eater via a person-to-cart-item-id ledger, per-person cost split with fee proration, payer rotation history, and a checkout gate that re-derives allergen conflicts against the roster live. Use when ordering for multiple people — team lunch, incident-response food, "collect orders from the thread" — or for /whose-turn payer rotation questions. Handles paste-a-thread intake: paste a Slack/chat thread and it builds the order ledger from it.
Accountability layer for agent-driven DoorDash ordering. Works with the doordash-audit-log hook (which appends every dd-cli invocation to an append-only audit log) and the /doordash-report command to answer "what has my AI been ordering and what did it cost" from data instead of memory. Use when the user asks about their DoorDash spending, ordering patterns, what the agent did in past sessions, or wants jq recipes for querying the audit log. Covers log schema, query patterns, rotation, and privacy guidance.
Named, context-bound saved DoorDash orders ("post-gym", "late-night deploy") recalled through the DoorDash CLI (dd-cli) with a mandatory cart-diff before any checkout link is handed over. Use when the user names a saved order ("order my post-gym bowl", "the usual", "my Friday ramen"), wants to save the order they just placed as a playbook, or asks to list/remove saved orders. Persists name→order-uuid playbooks across sessions, catches silent menu/price drift on every recall, and self-heals stale playbooks when a restaurant's menu changes. Requires dd-cli (macOS Apple Silicon, waitlist-gated).
Hard spending policy for agent-driven DoorDash ordering through the DoorDash CLI (dd-cli). Per-order ceiling, daily/weekly/monthly caps, cooldown between orders, and blocked hours — enforced deterministically by routing every cart-mutation and checkout through the dd-guard wrapper script, which prices the cart, checks the policy against a persistent spend ledger, and refuses out-of-policy checkouts with exit code 2. Use when the user wants budget limits on agent food ordering, asks "how much have I spent on DoorDash", wants to set spending caps, or whenever building carts / checking out with dd-cli while this skill is installed. Pairs with a PreToolUse hook that denies raw dd-cli checkout calls that bypass the wrapper.
Segment a SKU portfolio on value (ABC) and demand variability (XYZ), produce the 9-box with a planning policy per cell, and reallocate planner attention accordingly. Use when the user mentions ABC analysis, inventory segmentation, SKU rationalization, stok segmentasyonu, envanter sınıflandırma, or asks which items deserve forecasting effort. Differentiator - ABC alone is treated as half an answer; policy lives in the value x variability combination.
| name | gke-basics |
| description | Plans, creates, and configures production-ready Google Kubernetes Engine (GKE) clusters using the golden path Autopilot configuration. Covers networking, security, observability, scaling, cost optimization, and AI/ML inference on GKE. |
| source | google/skills (Apache 2.0) |
GKE is a managed Kubernetes platform on Google Cloud for deploying, scaling, and operating containerized applications. This skill defaults to the golden path Autopilot configuration — see gke-golden-path.md for defaults, rules, and guardrails.
gcloud services enable container.googleapis.com --quiet
gcloud container clusters create-auto my-cluster --region=us-central1 --quiet
gcloud container clusters get-credentials my-cluster --region=us-central1 --quiet
kubectl create deployment hello-server \
--image=us-docker.pkg.dev/google-samples/containers/gke/hello-app:1.0
Load the relevant reference based on trigger keywords. Prefer the most specific match; if ambiguous, ask the user to clarify.
| Scenario | Trigger Keywords | Reference |
|---|---|---|
| Core Concepts | Autopilot vs Standard, architecture, pricing, what is GKE | core-concepts.md |
| Golden Path & Defaults | golden path, Day-0 checklist, production defaults, cluster defaults | gke-golden-path.md |
| Cluster Creation | create cluster, new cluster, provision GKE | gke-cluster-creation.md |
| Networking | private cluster, VPC, subnet, Gateway API, DNS, ingress, egress, datapath | gke-networking.md |
| Security & IAM | Workload Identity, Secret Manager, RBAC, Binary Auth, hardening, audit, gVisor, IAM roles | gke-security.md |
| Scaling | HPA, VPA, autoscaler, autoscaling, NAP, scale pods, scale nodes | gke-scaling.md |
| Compute Classes | ComputeClass, machine family, Spot fallback, GPU node pool, node selection | gke-compute-classes.md |
| Cost | cost, savings, Spot VMs, rightsizing, CUD, optimize spend, budget | gke-cost.md |
| AI/ML Inference | inference, model serving, LLM, GPU, TPU, GIQ, vLLM | gke-inference.md |
| Upgrades | upgrade, maintenance window, release channel, patching, version | gke-upgrades.md |
| Observability | monitoring, logging, Prometheus, Grafana, metrics, alerts, dashboards | gke-observability.md |
| Multi-tenancy | multi-tenant, namespace isolation, team access, enterprise, RBAC planning | gke-multitenancy.md |
| Batch & HPC | batch, HPC, job queue, high performance, MPI, parallel | gke-batch-hpc.md |
| App Onboarding | containerize, deploy app, Dockerfile, onboard, migrate to GKE | gke-app-onboarding.md |
| Backup & DR | backup, restore, disaster recovery, CMEK | gke-backup-dr.md |
| Storage | storage, PVC, persistent volume, StorageClass, Filestore, GCS FUSE | gke-storage.md |
| Reliability | PDB, health probe, liveness, readiness, topology spread, graceful shutdown | gke-reliability.md |
| Client Libraries | client library, client-go, kubernetes python, kubernetes java, kubernetes SDK | client-library-usage.md |
| Infrastructure as Code | Terraform, IaC, HCL, infrastructure as code | iac-usage.md |
| MCP Server | MCP tools, MCP server, MCP setup | mcp-usage.md |
| CLI / Tools | gcloud, kubectl, commands, how to | cli-reference.md |
| Production Audit | production readiness, compliance, golden path check | gke-cluster-creation.md |
If you need product information not found in these references, use the Developer Knowledge MCP server search_documents tool.