GCP Cloud Skill

This skill provides GCP architecture patterns and best practices.

Core Services

Terraform Patterns

# GKE cluster
resource "google_container_cluster" "primary" {
  name     = "my-cluster"
  location = "us-central1"

  remove_default_node_pool = true
  initial_node_count       = 1

  workload_identity_config {
    workload_pool = "${var.project_id}.svc.id.goog"
  }
}

Security Best Practices

• Use Workload Identity (not service account keys)
• Enable VPC Service Controls
• Use Cloud IAM for access management
• Enable Cloud Audit Logs
• Use Customer-Managed Encryption Keys
• Enable Binary Authorization for GKE

BigQuery Patterns

-- Partitioned table for cost optimization
CREATE TABLE mydataset.events
PARTITION BY DATE(event_time)
CLUSTER BY user_id
AS SELECT * FROM staging.events;

Cost Optimization

• Use Committed Use Discounts
• Use Preemptible VMs for batch
• Enable autoscaling
• Use BigQuery slot reservations
• Archive to Coldline/Archive storage