gcloud-conventions

name	gcloud-conventions
description	Google Cloud conventions for xberg-io — project and region, the standard service set, resource naming, workload identity federation over service account keys, least-privilege IAM, and gcloud-CLI-only operations. Load when provisioning or configuring GCP resources, naming services/buckets, or setting up auth and IAM.

GCloud Conventions

• GCP project: xberg-io, region: europe-west1
• Services: Cloud Run (compute), Cloud Storage (artifacts), Cloud SQL/AlloyDB (Postgres), Pub/Sub (messaging), Artifact Registry (images), Secret Manager (credentials)
• Naming: xberg-{service}-{environment}, buckets: xberg-io-{purpose}-{environment}
• Auth: workload identity federation — never service account keys
• IAM: least privilege, no owner-level for service accounts
• Use gcloud CLI for all operations — no manual console changes