Gcloud Sdk

Skill: Google Cloud SDK (gcloud)

This skill provides expert guidelines for configuring GCP environments, handling authentication, and setting up IAM permissions for Agent platforms.

1. Local Authentication (ADC)

• Never use raw Service Account .json keys for local development unless strictly required. Use Application Default Credentials (ADC):

  gcloud auth application-default login
  

• Verify your active project configuration:

  gcloud config get-value project
  

2. IAM Role Bindings for Agent Platform

• Grant the necessary roles to allow agents to invoke models (Vertex AI User):

  gcloud projects add-iam-policy-binding YOUR_PROJECT_ID \
    --member="serviceAccount:YOUR_SERVICE_ACCOUNT_EMAIL" \
    --role="roles/aiplatform.user"
  

• Grant Cloud Storage permissions to the BigQuery Migration Service:

  gcloud storage buckets add-iam-policy-binding gs://YOUR_BUCKET_NAME \
    --member="serviceAccount:service-PROJECT_NUMBER@gcp-sa-bigquerymigration.iam.gserviceaccount.com" \
    --role="roles/storage.objectViewer"
  

3. Vertex AI Search (Discovery Engine) Config

• Global vs Regional Endpoints:
  • Global Data Stores must communicate through discoveryengine.googleapis.com.
  • Regional Data Stores (e.g., in us-central1) require you to explicitly map the API endpoint to: us-central1-discoveryengine.googleapis.com.