# Gcloud Conventions

> Google Cloud conventions for xberg-io — project and region, the standard service set, resource naming, workload identity federation over service account keys, least-privilege IAM, and gcloud-CLI-only operations. Load when provisioning or configuring GCP resources, naming services/buckets, or setting up auth and IAM.

- Skill: `kreuzberg-dev/gcloud-conventions` (Agent Skill)
- Install (CLI): `npx skillmds@latest add kreuzberg-dev/gcloud-conventions`
- Raw SKILL.md: https://api.skillmd.com/api/skills/kreuzberg-dev/gcloud-conventions/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: kreuzberg-dev (https://skillmd.com/u/kreuzberg-dev)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/kreuzberg-dev/gcloud-conventions

---


# GCloud Conventions

- GCP project: xberg-io, region: europe-west1
- Services: Cloud Run (compute), Cloud Storage (artifacts), Cloud SQL/AlloyDB (Postgres), Pub/Sub (messaging), Artifact Registry (images), Secret Manager (credentials)
- Naming: xberg-{service}-{environment}, buckets: xberg-io-{purpose}-{environment}
- Auth: workload identity federation — never service account keys
- IAM: least privilege, no owner-level for service accounts
- Use gcloud CLI for all operations — no manual console changes