# Gcloud Sdk

> Skill: Google Cloud SDK (`gcloud`)

- Skill: `izzyfresh/gcloud-sdk` (Agent Skill)
- Install (CLI): `npx skillmds@latest add izzyfresh/gcloud-sdk`
- Raw SKILL.md: https://api.skillmd.com/api/skills/izzyfresh/gcloud-sdk/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: IzzyFresh (https://skillmd.com/u/izzyfresh)
- Updated: 2026-09-21
- Page: https://skillmd.com/skills/izzyfresh/gcloud-sdk

---

# Skill: Google Cloud SDK (`gcloud`)

This skill provides expert guidelines for configuring GCP environments, handling authentication, and setting up IAM permissions for Agent platforms.

---

## 1. Local Authentication (ADC)
*   Never use raw Service Account `.json` keys for local development unless strictly required. Use Application Default Credentials (ADC):
    ```bash
    gcloud auth application-default login
    ```
*   Verify your active project configuration:
    ```bash
    gcloud config get-value project
    ```

## 2. IAM Role Bindings for Agent Platform
*   Grant the necessary roles to allow agents to invoke models (Vertex AI User):
    ```bash
    gcloud projects add-iam-policy-binding YOUR_PROJECT_ID \
      --member="serviceAccount:YOUR_SERVICE_ACCOUNT_EMAIL" \
      --role="roles/aiplatform.user"
    ```
*   Grant Cloud Storage permissions to the BigQuery Migration Service:
    ```bash
    gcloud storage buckets add-iam-policy-binding gs://YOUR_BUCKET_NAME \
      --member="serviceAccount:service-PROJECT_NUMBER@gcp-sa-bigquerymigration.iam.gserviceaccount.com" \
      --role="roles/storage.objectViewer"
    ```

## 3. Vertex AI Search (Discovery Engine) Config
*   **Global vs Regional Endpoints:** 
    *   Global Data Stores must communicate through `discoveryengine.googleapis.com`.
    *   Regional Data Stores (e.g., in `us-central1`) require you to explicitly map the API endpoint to: `us-central1-discoveryengine.googleapis.com`.