CommunityProgramação e Desenvolvimentogithub.com

google/google-cloud-recipe-auth

Fornece orientação especializada sobre autenticação e autorização para serviços e APIs do Google Cloud, abrangendo usuários humanos, identidades de serviço, Application Default Credentials (ADC) e práticas recomendadas para acesso seguro.

O que é google-cloud-recipe-auth?

Esta skill oferece conhecimento especializado para autenticar e autorizar o acesso a serviços e APIs do Google Cloud, cobrindo identidades humanas e de serviço, Application Default Credentials (ADC) e práticas recomendadas de segurança. Ela ajuda desenvolvedores e administradores a configurar corretamente a autenticação, evitar erros comuns e garantir acesso seguro. A skill suporta diferentes plataformas, como Google Cloud SDK, ferramentas de IaC (Terraform, Deployment Manager) e serviços como Cloud Run, GKE e Compute Engine. Ao seguir suas orientações, os usuários podem implementar o princípio do menor privilégio, gerenciar chaves de conta de serviço adequadamente e utilizar tokens OAuth 2.0 com confiança.

Funciona com~Claude Code~Codex CLI~Cursor
npx skills add https://github.com/google/skills/tree/main/skills/google-cloud-recipe-auth

Installed? Explore more Programação e Desenvolvimento skills: steipete/bluebubbles, steipete/eightctl, steipete/blucli · View all 6 →

Ver original→Navegar por todas as habilidades

Perguntar na sua IA favorita

Abre um novo chat com esta habilidade de agente já pré-carregada.

OpenAIChatGPTClaudeClaudeGeminiGeminiGrokGrokPerplexityPerplexityDeepSeekDeepSeek

Documentação

O que google-cloud-recipe-auth faz?

Fornece orientação especializada sobre autenticação e autorização para serviços e APIs do Google Cloud, abrangendo usuários humanos, identidades de serviço, Application Default Credentials (ADC) e práticas recomendadas para acesso seguro.

Visão geral

Esta skill ajuda você a navegar pelo complexo cenário de autenticação e autorização do Google Cloud, incluindo:

  • Application Default Credentials (ADC): Como o ADC funciona e quando usá-lo.
  • Contas de serviço: Criação, gerenciamento e melhores práticas.
  • Usuários humanos: Fluxos OAuth 2.0, login federado e chaves de API.
  • Autorização: Controle de Acesso Baseado em Função (IAM) e políticas personalizadas.
  • Segurança: Práticas de segurança como o princípio do menor privilégio e rotação de chaves.

Como usar

Para obter orientação sobre um cenário específico, descreva seu caso de uso e a skill fornecerá as etapas e configuração apropriadas.

Exemplos

Exemplo 1: Configurar ADC para desenvolvimento local

gcloud auth application-default login

Exemplo 2: Criar e usar uma conta de serviço

gcloud iam service-accounts create my-sa --display-name="Minha Conta de Serviço"
gcloud iam service-accounts keys create ./key.json --iam-account=my-sa@PROJECT_ID.iam.gserviceaccount.com
export GOOGLE_APPLICATION_CREDENTIALS=./key.json

Exemplo 3: Conceder papel de IAM a uma conta de serviço

gcloud projects add-iam-policy-binding PROJECT_ID \
    --member="serviceAccount:my-sa@PROJECT_ID.iam.gserviceaccount.com" \
    --role="roles/storage.objectViewer"

Notas importantes

  • Mantenha as chaves privadas seguras e nunca as inclua em repositórios públicos.
  • Utilize o ADC em vez de armazenar chaves de API em código para produção.
  • Siga o princípio do menor privilégio ao conceder papéis de IAM.
  • Prefira identidades de carga de trabalho (Workload Identity) para aplicações em execução no GKE ou outros clusters.

Veja também

Individual skills in this repo

This repo contains 18 individual skills — each has its own dedicated page.

google/agent-platform-skill-registry

Interact with the Gemini Enterprise Agent Platform Skill Registry to create and search for available skills. Use this skill to enable agents to register functionality or discover new capabilities.

google/alloydb-basics

Manages clusters, instances, and backups for AlloyDB for PostgreSQL, and integrates with AlloyDB model context protocol (MCP) tools for automated database operations.

google/bigquery-basics

Manages datasets, tables, and jobs in BigQuery, and integrates with BigQuery ML and Gemini for advanced data analytics and AI-driven insights. Use when you need to interact with BigQuery, run SQL queries, manage BigQuery resources, or leverage BigQuery's built-in ML capabilities. Also use when performing data analysis, ingesting data into BigQuery, or developing AI applications on BigQuery.

google/cloud-run-basics

Manages Cloud Run services, jobs, and worker pools. Use when you need to deploy applications responding to HTTP requests (services), run event-triggered or scheduled tasks (jobs), or handle always-on pull-based background processing (worker pools).

google/cloud-sql-basics

This file generates or explains Cloud SQL resources. Use this file when the user asks to create a Cloud SQL instance or database for MySQL, PostgreSQL, or SQL Server. Cloud SQL manages third-party MySQL, PostgreSQL, and SQL Server instances as resources in Cloud SQL. For example, when Cloud SQL creates an open-source MySQL instance, the resulting resource is a Cloud SQL for MySQL instance that Google Cloud manages. Cloud SQL handles backups, high availability, and secure connectivity for relational database workloads.

google/firebase-basics

Use this skill whenever you are working on a project that uses Firebase products or services, especially for mobile or web apps.

google/gemini-api

Use when the user asks about using Gemini in an enterprise environment or explicitly mentions Vertex AI, Google Cloud, or Agent Platform. Guides the usage of the Gemini API on Agent Platform with the Google Gen AI SDK. Covers SDK usage (Python, JS/TS, Go, Java, C#), capabilities like multimodal inputs, tools, media generation, caching, batch prediction, and Live API.

google/gemini-interactions-api

Guides the usage of Gemini Interactions API on Gemini Enterprise Agent Platform. Use when the user wants to use the stateful, server-managed Interactions API for multi-turn conversations, background execution, streaming, structured output, and function calling on the Agent Platform.

google/gke-basics

Plan, create, and configure production-ready Google Kubernetes Engine (GKE) clusters using the golden path Autopilot configuration. Covers Day-0 checklist, Autopilot vs Standard, networking (private clusters, VPC-native, Gateway API), security (Workload Identity, Secret Manager, RBAC hardening), observability, scaling, cost optimization, and AI/ML inference. WHEN: create GKE cluster, provision GKE environment, design GKE networking, secure GKE, optimize GKE cost, GKE autoscaling, GKE inference, GKE upgrade, GKE observability, GKE multi-tenancy, GKE batch, GKE HPC, GKE compute class.

google/google-cloud-networking-observability

Investigates Google Cloud networking issues by analyzing logs, metrics, and diagnostics. Use when investigating VPC Flow Logs (including cost estimation), NAT, firewall, or threat logs, querying latency and throughput metrics, or running Connectivity Tests for path diagnostics. Don't use for generic VM management or non-observability tasks.

google/google-cloud-recipe-networking-observability

Investigates Google Cloud networking issues by analyzing logs, metrics, and diagnostics. Use when investigating VPC Flow Logs, NAT, firewall, or threat logs, querying latency and throughput metrics, or running Connectivity Tests for path diagnostics.

google/google-cloud-recipe-onboarding

Guides a developer's first steps on Google Cloud, covering account creation, billing setup, project management, and deploying a first resource. Use when a new developer wants to initialize their first Google Cloud project, configure billing, and verify deployment. Don't use for enterprise organization setup (use Google Cloud Setup guided flow for that instead). Don't use for complex multi-project architectures.

google/google-cloud-waf-cost-optimization

Generates cost optimization guidance for Google Cloud workloads based on the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate a workload, identify cost requirements and constraints, and provide actionable recommendations for build, deploy, and manage the workload cost-efficiently in Google Cloud.

google/google-cloud-waf-operational-excellence

Generates operations-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Operational Excellence pillar of the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate a workload, identify operational requirements, and provide actionable recommendations for deployment, monitoring, and incident management.

google/google-cloud-waf-performance-optimization

Generates performance-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Performance Optimization pillar of the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate a workload, identify performance requirements, and provide actionable recommendations for resource allocation, modular design, and elasticity.

google/google-cloud-waf-reliability

Generates reliability-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework. Use this skill to evaluate a workload, identify reliability requirements, and provide actionable recommendations for build, deploy, and manage the workload reliably in Google Cloud.

google/google-cloud-waf-security

Generates security-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate a workload, identify security requirements, and provide actionable recommendations for IAM, network security, data protection, and operational security.

google/google-cloud-waf-sustainability

Generates sustainability-focused guidance for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate a workload, identify environmental impact requirements, and provide actionable recommendations to build, deploy, and manage the workload sustainably in Google Cloud.

Habilidades Relacionadas

steipete/bluebubbles

Send and manage iMessages via BlueBubbles, including attachments, tapbacks, edits, replies, and groups.

community

steipete/eightctl

Control Eight Sleep pods (status, temperature, alarms, schedules).

community

steipete/blucli

BluOS CLI (blu) for discovery, playback, grouping, and volume.

community

steipete/bear-notes

Create, search, and manage Bear notes via grizzly CLI.

community

steipete/camsnap

Capture frames or clips from RTSP/ONVIF cameras.

community

steipete/gifgrep

Search GIF providers with CLI/TUI, download results, and extract stills/sheets.

community
← More Programação e Desenvolvimento skills