Google Cloud CLI Skill
Installation
The skill invokes the gcloud CLI. Install and initialize:
- Linux/macOS:
curl https://sdk.cloud.google.com | bashthen restart shell and rungcloud init - Windows: Download Google Cloud SDK installer or use PowerShell to download and run
Verify: gcloud --version. Configure: gcloud init
Cheat Sheet & Best Practices
Config: gcloud config set project <id>; gcloud config list; gcloud config configurations create/activate <name> — switch projects.
Auth: gcloud auth login; use --impersonate-service-account for SA; --access-token-file for CI.
Hacks: Use --format="table(name,zone,status)" or --format=json + jq to cut output. Use --flags-file=file.yaml for long or repeated flags. Use named configurations for dev/staging/prod. Run gcloud components update periodically.
Certifications & Training
Free: Google Cloud Learn and Google Skills — Innovators Program (35 credits/month). Certs: Cloud Digital Leader, Cloud Engineer (associate), Cloud Architect/DevOps (professional). Skill data: Config, auth, compute/storage/IAM; no exposed service-account keys.
Hooks & Workflows
Suggested hooks: Pre-deploy: gcloud config get-value project. Use when devops is routed for GCP tasks (contextual: gcp_project).
Workflows: Use with devops (contextual: gcp_project). Flow: detect GCP → load gcloud-cli → run CLI via skill script.
Overview
Google Cloud Platform CLI operations. 90%+ context savings.
Requirements
- gcloud CLI installed
- GOOGLE_PROJECT_ID environment variable
- Authenticated via gcloud auth
Tools (Progressive Disclosure)
Compute
| Tool | Description | Confirmation | | ---------------- | ----------------- | ------------ | | instances-list | List VM instances | No | | instances-create | Create VM | Yes | | instances-delete | Delete VM | REQUIRED |
Storage
| Tool | Description | Confirmation | | ---------- | -------------------- | ------------ | | storage-ls | List buckets/objects | No | | storage-cp | Copy objects | Yes | | storage-rm | Delete objects | Yes |
IAM
| Tool | Description | | ---------------- | --------------------- | | iam-list | List IAM policies | | service-accounts | List service accounts |
Logging
| Tool | Description | | --------- | ---------------------- | | logs-read | Read logs | | logs-tail | Tail logs in real-time |
BLOCKED
| Tool | Status | | ----------------- | ----------- | | projects delete | BLOCKED | | iam-policy delete | BLOCKED |
Agent Integration
- devops (primary): Cloud operations
- gcp-cloud-agent (primary): GCP specific
- cloud-integrator (secondary): Multi-cloud
Security
⚠️ Never expose service account keys ⚠️ Resource deletion requires confirmation
Memory Protocol (MANDATORY)
Before starting:
Read .claude/context/memory/learnings.md
After completing:
- New pattern ->
.claude/context/memory/learnings.md - Issue found ->
.claude/context/memory/issues.md - Decision made ->
.claude/context/memory/decisions.md
ASSUME INTERRUPTION: If it's not in memory, it didn't happen.