# GCP Deploy

> Generate GCP deployment configurations for GKE, Cloud Run, and Cloud Functions

- Skill: `erp-core-dev/gcp-deploy` (Agent Skill)
- Install (CLI): `npx skillmds@latest add erp-core-dev/gcp-deploy`
- Raw SKILL.md: https://api.skillmd.com/api/skills/erp-core-dev/gcp-deploy/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: ERP-CORE-DEV (https://skillmd.com/u/erp-core-dev)
- Updated: 2026-09-10
- Page: https://skillmd.com/skills/erp-core-dev/gcp-deploy

---


# GCP Deployment

Generate GCP deployment configuration for the given service.

## Deployment Types

### GKE (default)
- Kubernetes manifests: Deployment, Service, Ingress (GKE Ingress)
- HPA, PodDisruptionBudget, node affinity for GPU workloads
- Artifact Registry for container images
- Secret Manager via External Secrets Operator or Workload Identity
- Rolling update with surge and unavailable settings

### Cloud Run
- Service YAML with container image, CPU/memory limits
- Traffic splitting: canary (10/90) or blue-green (0/100 switch)
- Cloud Load Balancing with custom domains
- Secret Manager volumes for sensitive config
- Min/max instances, concurrency, and request timeout

### Cloud Functions (2nd gen)
- Function source deployment (HTTP or event-triggered)
- Eventarc triggers for Pub/Sub, Cloud Storage, Firestore
- VPC connector for private network access
- Secret Manager environment binding

## Common
- VPC: private Google access, Cloud NAT for egress
- IAM: service account per service, least-privilege
- Cloud Armor for WAF/DDoS protection on public endpoints
- Cloud Monitoring: uptime checks, alerting policies, SLO definitions
- Secret Manager for all sensitive configuration

## Arguments
- `<service-name>`: Service name in kebab-case
- `--type=<gke|cloudrun|functions>`: Deployment target (default: gke)