172 skills (repositories by google) · sorted by popularity
Diagnose GKE TPU node pool creation or expansion failures despite reserved capacity. Trace which virtual machines and unhealthy node pools occupy reservation slots, check automatic repair settings, and provide remediation steps for the user to apply.
Diagnose GKE TPU slice creation failures caused by shared nodes. Check slice status, partition labels, and monitoring data to identify conflicting resource groups, then provide resolution steps for the user to apply.
Configure authentication and per-project request limits for Google Cloud API Gateway. Secure access to Cloud Run backends, validate quota changes against existing configurations, and investigate HTTP 429 or Service Control Quota errors, including on MCP-enabled gateways.
Diagnose GKE TPU slice creation failures and pending JobSets caused by unstable managed instance groups, the underlying VM groups. Read-only checks examine logs, instance status, upgrades, and repairs to identify causes and suggest user-applied fixes.
Diagnose GKE TPU virtual machines that remain in repair by checking instance status, host events, and automatic repair history. Understand the impact on grouped TPU nodes and identify recovery steps for the user to apply.
Assess existing Google Cloud folders and projects through read-only discovery. Compare resource locations, service usage, and customer-managed encryption requirements with Assured Workloads frameworks, then report suitable options and policy readiness findings.
Expose REST APIs as tools for AI agents through Google Cloud API Gateway using MCP, a protocol for connecting agents to tools. Covers OpenAPI migration, authentication, client connections, validation, and troubleshooting.
Creates Terraform configuration for Google Cloud Monitoring notification channels, including email, Slack, and Pub/Sub, and attaches channels to existing alert policies. It also checks Pub/Sub topic compatibility and publishing permissions when inspecting the cloud environment.
Guides migration of existing codebases to Rust without unsafe code, covering architecture, implementation, testing, and output comparisons. It measures performance before and after optimization and produces an interactive HTML report documenting results and unresolved differences.
Implement Google sign-in for web applications using Google Identity Services. Add sign-in buttons or One Tap, verify ID tokens as proof of identity, configure browser security policies, and handle sessions, sign-out, and account disconnection.
Helps address Google Cloud Security Command Center findings by planning targeted fixes for permissions, misconfigurations, vulnerabilities, and combined attack paths. It includes impact checks, verification, rollback steps, and execution after user approval.
Investigate stalled TPU training across multiple slices on GKE using hang reports, logs, and latency metrics. Separate compilation inconsistencies and data input stalls from hardware or network faults, and identify the relevant nodes for further investigation.
Investigate slow TPU training on GKE by comparing diagnostic events with one-minute monitoring metrics. Separate memory or CPU bottlenecks from hardware and network issues, and identify the appropriate next steps.
Investigate slow or failing requests in Google Cloud using Cloud Trace. Filter traces by duration or error status, inspect spans representing individual operations, and retrieve related Cloud Logging entries to investigate bottlenecks and exceptions.
Diagnose unresponsive GKE GPU or TPU nodes and pods stuck terminating through read-only checks of node status, logs, serial output, and repair history. Receive documented recovery guidance to apply yourself.
Implement and debug Google OAuth 2.0 refresh tokens bound to a client key. Covers key generation, signed DPoP proofs that demonstrate key possession, and nonce challenge retries in WebCrypto and JavaScript environments.
Design a Google Cloud system that combines multiple services, starting with a discussion of business and technical requirements. The skill produces service recommendations, architecture diagrams, deployment guidance, and validation plans, with user approval at each stage.
Design an enterprise search system that answers questions using retrieved company content, an approach called RAG. Gather requirements and produce architecture diagrams, deployment guidance, and validation plans using GKE, AlloyDB, and open models.
Review Google Cloud workloads against the security principles of the Well-Architected Framework. Identify gaps in access control, network protection, data handling, and security operations, then receive prioritized recommendations linked to relevant Google Cloud products.
Evaluate Google Cloud workloads against built-in best practices or custom organizational rules using Workload Manager. Use public client libraries or the REST API to run checks, review violations and scanned resources, and export results to BigQuery.
Manages security incident cases in Google SecOps, from reviewing queues and related alerts to updating priorities, assignments, and investigation notes. It supports closing cases with documented causes, with available actions depending on the connected MCP tools.
Diagnoses applications that fail to start or repeatedly crash on GKE, Google's managed Kubernetes service. It examines logs, events, memory use, image pulls, and connectivity, then proposes configuration patches or commands without applying live changes.
Plan and build AI agents on Google Cloud, from gathering requirements to choosing a single-agent or multi-agent design. Produce architecture diagrams, deployment code and instructions, and validation plans tailored to the workload.
Investigate failed workflows and tasks in Managed Service for Apache Airflow. The skill compares remote logs, task states, and source code to explain failures, show supporting evidence, and recommend specific code or configuration fixes.