# GCP Cloud

> Google Cloud Platform infrastructure patterns and best practices. Use when designing or implementing GCP solutions including Compute Engine, Cloud Functions, Cloud Storage, and BigQuery. Use when this capability is needed.

- Skill: `tomevault-io/gcp-cloud` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add tomevault-io/gcp-cloud`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tomevault-io/gcp-cloud/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: DevOps & Infra
- Author: tomevault-io (https://skillmd.com/u/tomevault-io)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/tomevault-io/gcp-cloud

---


# GCP Cloud Skill

This skill provides GCP architecture patterns and best practices.

## Core Services

| Service | Use Case |
|---------|----------|
| Compute Engine | Virtual machines |
| Cloud Functions | Serverless functions |
| Cloud Run | Containers serverless |
| Cloud Storage | Object storage |
| Cloud SQL | Managed databases |
| BigQuery | Data warehouse |
| GKE | Kubernetes |

## Terraform Patterns

```hcl
# GKE cluster
resource "google_container_cluster" "primary" {
  name     = "my-cluster"
  location = "us-central1"

  remove_default_node_pool = true
  initial_node_count       = 1

  workload_identity_config {
    workload_pool = "${var.project_id}.svc.id.goog"
  }
}
```

## Security Best Practices

- Use Workload Identity (not service account keys)
- Enable VPC Service Controls
- Use Cloud IAM for access management
- Enable Cloud Audit Logs
- Use Customer-Managed Encryption Keys
- Enable Binary Authorization for GKE

## BigQuery Patterns

```sql
-- Partitioned table for cost optimization
CREATE TABLE mydataset.events
PARTITION BY DATE(event_time)
CLUSTER BY user_id
AS SELECT * FROM staging.events;
```

## Cost Optimization

- Use Committed Use Discounts
- Use Preemptible VMs for batch
- Enable autoscaling
- Use BigQuery slot reservations
- Archive to Coldline/Archive storage

---
> Converted and distributed by [TomeVault](https://tomevault.io/claim/jpoutrin) — claim your Tome and manage your conversions.
<!-- tomevault:4.0:skill_md:2026-04-11 -->