Gcloud Conventions

Google Cloud conventions for xberg-io — project and region, the standard service set, resource naming, workload identity federation over service account keys, least-privilege IAM, and gcloud-CLI-only operations. Load when provisioning or configuring GCP resources, naming services/buckets, or setting up auth and IAM.

kreuzberg-dev ddf3f54 880 B Updated

File contents

GCloud Conventions

  • GCP project: xberg-io, region: europe-west1
  • Services: Cloud Run (compute), Cloud Storage (artifacts), Cloud SQL/AlloyDB (Postgres), Pub/Sub (messaging), Artifact Registry (images), Secret Manager (credentials)
  • Naming: xberg-{service}-{environment}, buckets: xberg-io-{purpose}-{environment}
  • Auth: workload identity federation — never service account keys
  • IAM: least privilege, no owner-level for service accounts
  • Use gcloud CLI for all operations — no manual console changes

kreuzberg-dev/ai-rulez/tree/main/modules/infrastructure/skills/gcloud-conventions commit ddf3f54e02

Frequently asked questions

npx skillmds@latest add kreuzberg-dev/gcloud-conventions