Skill

gcp-patterns

GCP production patterns: Cloud Run with Terraform, Workload Identity Federation (no service account keys), Cloud SQL with private IP, Memorystore Redis, BigQuery for analytics, Cloud Armor WAF, Secret Manager, VPC Service Controls, IAM least privilege bindings. Use when designing GCP architecture, writing Terraform for GCP, reviewing IAM policies.

Install

npx claudepluginhub rnavarych/alpha-engineer --plugin billy-milligan

Tool Access

This skill is limited to using the following tools:

ReadGrepGlob

Preview

- Deploying containers to Cloud Run

Supporting Assets

references/compute-patterns.mdreferences/data-patterns.mdreferences/networking-patterns.md

SKILL.md

Similar Skills

article-writing

Writes articles, guides, blog posts, tutorials, and newsletters in a voice from examples or brand guidance. For polished long-form content with structure, pacing, and credibility.

everything-claude-code

156.2k

architecture-decision-records

Captures architectural decisions in Claude Code sessions as structured ADRs. Auto-detects choices between alternatives and maintains a docs/adr log for codebase rationale.

everything-claude-code

156.2k

api-design

Provides REST API design patterns for resource naming, URL structures, HTTP methods/status codes, pagination, filtering, errors, versioning, and rate limiting.

everything-claude-code

156.2k

Stats

Parent Repo Stars9

Parent Repo Forks0

Last CommitFeb 23, 2026

Actions

View Source View Plugin View on GitHub View README

gcp-patterns

Core Principles

Cloud Run for stateless services — autoscales to 0, no cluster management, pay per request

Workload Identity Federation, never SA keys — SA keys are persistent credentials; WIF is token-based and short-lived

Private IP for all data services — Cloud SQL, Memorystore: no public IP, accessed via VPC

IAM bindings on resources, not members — bind roles to service accounts scoped to specific resources

BigQuery for analytics over Cloud SQL — even 1B row aggregations run in <10 seconds on BigQuery

References available

references/compute-patterns.md — Cloud Run Terraform, Workload Identity Federation for GitHub Actions, IAM least privilege bindings

references/data-patterns.md — Cloud SQL private IP, Memorystore Redis, BigQuery partitioning and clustering, Secret Manager

references/networking-patterns.md — VPC connector, Cloud Armor WAF, VPC Service Controls, load balancer setup

GCP Production Patterns

When to Use This Skill

Deploying containers to Cloud Run
Setting up Workload Identity Federation (no SA keys)
Configuring Cloud SQL with private IP
Writing Terraform for GCP infrastructure
Querying BigQuery for analytics

Core Principles

Cloud Run for stateless services — autoscales to 0, no cluster management, pay per request
Workload Identity Federation, never SA keys — SA keys are persistent credentials; WIF is token-based and short-lived
Private IP for all data services — Cloud SQL, Memorystore: no public IP, accessed via VPC
IAM bindings on resources, not members — bind roles to service accounts scoped to specific resources
BigQuery for analytics over Cloud SQL — even 1B row aggregations run in <10 seconds on BigQuery

References available

references/compute-patterns.md — Cloud Run Terraform, Workload Identity Federation for GitHub Actions, IAM least privilege bindings
references/data-patterns.md — Cloud SQL private IP, Memorystore Redis, BigQuery partitioning and clustering, Secret Manager
references/networking-patterns.md — VPC connector, Cloud Armor WAF, VPC Service Controls, load balancer setup