[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill-google-cloud-gke-multi-tenancy":3,"mdc--yyrn6r-key":34,"related-repo-google-cloud-gke-multi-tenancy":1028,"related-org-google-cloud-gke-multi-tenancy":1128},{"slug":4,"name":4,"fn":5,"description":6,"org":7,"tags":12,"stars":24,"repoUrl":25,"updatedAt":26,"license":27,"forks":28,"topics":29,"repo":30,"sourceUrl":32,"mdContent":33},"gke-multi-tenancy","implement GKE multi-tenancy and governance","Guidance on implementing multi-tenancy and governance in Google Kubernetes Engine (GKE) clusters.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},"google-cloud","Google Cloud","https:\u002F\u002Fpexgzepcugksgbtrxkhf.supabase.co\u002Fstorage\u002Fv1\u002Fobject\u002Fpublic\u002Forg-logos\u002Fgoogle-cloud.png","GoogleCloudPlatform",[13,17,20,23],{"name":14,"slug":15,"type":16},"Governance","governance","tag",{"name":18,"slug":19,"type":16},"Multi-Tenant","multi-tenant",{"name":21,"slug":22,"type":16},"Kubernetes","kubernetes",{"name":9,"slug":8,"type":16},161,"https:\u002F\u002Fgithub.com\u002FGoogleCloudPlatform\u002Fgke-mcp","2026-07-12T07:39:55.861146",null,78,[],{"repoUrl":25,"stars":24,"forks":28,"topics":31,"description":27},[],"https:\u002F\u002Fgithub.com\u002FGoogleCloudPlatform\u002Fgke-mcp\u002Ftree\u002FHEAD\u002Fskills\u002Fgke-multi-tenancy","---\nname: gke-multi-tenancy\ndescription: Guidance on implementing multi-tenancy and governance in Google Kubernetes Engine (GKE) clusters.\n---\n\n# GKE Multi-tenancy and Governance\n\nThis skill provides guidance on implementing multi-tenancy and governance in Google Kubernetes Engine (GKE) clusters.\n\n## Overview\n\nMulti-tenancy allows you to share a single GKE cluster among multiple teams or applications securely. Governance ensures that policies and resource limits are enforced.\n\n## Workflows\n\n### 1. Create Namespaces for Isolation\n\nNamespaces provide a scope for names and are the primary unit of isolation in Kubernetes.\n\n**Steps:**\n\n1. Create a namespace for each tenant.\n\n**Example Namespace Manifest:**\n\n```yaml\napiVersion: v1\nkind: Namespace\nmetadata:\n  name: tenant-a\n  labels:\n    team: alpha\n```\n\n### 2. Configure RBAC for Least Privilege\n\nRole-Based Access Control (RBAC) allows you to control who has access to what resources within a namespace.\n\n**Steps:**\n\n1. Define a `Role` with specific permissions.\n2. Bind the `Role` to a user or group using a `RoleBinding`.\n\n**Example Role and RoleBinding Manifest:**\n\n```yaml\napiVersion: rbac.authorization.k8s.io\u002Fv1\nkind: Role\nmetadata:\n  namespace: tenant-a\n  name: pod-reader\nrules:\n  - apiGroups: [\"\"] # \"\" indicates the core API group\n    resources: [\"pods\"]\n    verbs: [\"get\", \"watch\", \"list\"]\n---\napiVersion: rbac.authorization.k8s.io\u002Fv1\nkind: RoleBinding\nmetadata:\n  name: read-pods\n  namespace: tenant-a\nsubjects:\n  - kind: User\n    name: user@example.com # Name is case sensitive\n    apiGroup: rbac.authorization.k8s.io\nroleRef:\n  kind: Role\n  name: pod-reader\n  apiGroup: rbac.authorization.k8s.io\n```\n\n### 3. Enforce Resource Quotas\n\nResource quotas prevent a single tenant from consuming all resources in the cluster.\n\n**Example ResourceQuota Manifest:**\n\n```yaml\napiVersion: v1\nkind: ResourceQuota\nmetadata:\n  name: tenant-a-quota\n  namespace: tenant-a\nspec:\n  hard:\n    requests.cpu: \"2\"\n    requests.memory: 4Gi\n    limits.cpu: \"4\"\n    limits.memory: 8Gi\n```\n\n## Best Practices\n\n1. **Namespace Per Tenant**: Always use separate namespaces for different teams or applications.\n2. **Least Privilege RBAC**: Grant only the permissions necessary for users and service accounts to do their jobs.\n3. **Enforce Quotas**: Use Resource Quotas to ensure fair sharing of cluster resources.\n4. **Network Policies**: Combine namespaces with Network Policies (see [gke-workload-security](..\u002Fgke-workload-security\u002FSKILL.md)) to restrict cross-tenant traffic.\n",{"data":35,"body":36},{"name":4,"description":6},{"type":37,"children":38},"root",[39,48,54,61,66,72,79,84,93,103,111,228,234,239,246,282,290,756,762,767,775,964,970,1022],{"type":40,"tag":41,"props":42,"children":44},"element","h1",{"id":43},"gke-multi-tenancy-and-governance",[45],{"type":46,"value":47},"text","GKE Multi-tenancy and Governance",{"type":40,"tag":49,"props":50,"children":51},"p",{},[52],{"type":46,"value":53},"This skill provides guidance on implementing multi-tenancy and governance in Google Kubernetes Engine (GKE) clusters.",{"type":40,"tag":55,"props":56,"children":58},"h2",{"id":57},"overview",[59],{"type":46,"value":60},"Overview",{"type":40,"tag":49,"props":62,"children":63},{},[64],{"type":46,"value":65},"Multi-tenancy allows you to share a single GKE cluster among multiple teams or applications securely. Governance ensures that policies and resource limits are enforced.",{"type":40,"tag":55,"props":67,"children":69},{"id":68},"workflows",[70],{"type":46,"value":71},"Workflows",{"type":40,"tag":73,"props":74,"children":76},"h3",{"id":75},"_1-create-namespaces-for-isolation",[77],{"type":46,"value":78},"1. Create Namespaces for Isolation",{"type":40,"tag":49,"props":80,"children":81},{},[82],{"type":46,"value":83},"Namespaces provide a scope for names and are the primary unit of isolation in Kubernetes.",{"type":40,"tag":49,"props":85,"children":86},{},[87],{"type":40,"tag":88,"props":89,"children":90},"strong",{},[91],{"type":46,"value":92},"Steps:",{"type":40,"tag":94,"props":95,"children":96},"ol",{},[97],{"type":40,"tag":98,"props":99,"children":100},"li",{},[101],{"type":46,"value":102},"Create a namespace for each tenant.",{"type":40,"tag":49,"props":104,"children":105},{},[106],{"type":40,"tag":88,"props":107,"children":108},{},[109],{"type":46,"value":110},"Example Namespace Manifest:",{"type":40,"tag":112,"props":113,"children":118},"pre",{"className":114,"code":115,"language":116,"meta":117,"style":117},"language-yaml shiki shiki-themes material-theme-lighter material-theme material-theme-palenight","apiVersion: v1\nkind: Namespace\nmetadata:\n  name: tenant-a\n  labels:\n    team: alpha\n","yaml","",[119],{"type":40,"tag":120,"props":121,"children":122},"code",{"__ignoreMap":117},[123,147,165,179,197,210],{"type":40,"tag":124,"props":125,"children":128},"span",{"class":126,"line":127},"line",1,[129,135,141],{"type":40,"tag":124,"props":130,"children":132},{"style":131},"--shiki-light:#E53935;--shiki-default:#F07178;--shiki-dark:#F07178",[133],{"type":46,"value":134},"apiVersion",{"type":40,"tag":124,"props":136,"children":138},{"style":137},"--shiki-light:#39ADB5;--shiki-default:#89DDFF;--shiki-dark:#89DDFF",[139],{"type":46,"value":140},":",{"type":40,"tag":124,"props":142,"children":144},{"style":143},"--shiki-light:#91B859;--shiki-default:#C3E88D;--shiki-dark:#C3E88D",[145],{"type":46,"value":146}," v1\n",{"type":40,"tag":124,"props":148,"children":150},{"class":126,"line":149},2,[151,156,160],{"type":40,"tag":124,"props":152,"children":153},{"style":131},[154],{"type":46,"value":155},"kind",{"type":40,"tag":124,"props":157,"children":158},{"style":137},[159],{"type":46,"value":140},{"type":40,"tag":124,"props":161,"children":162},{"style":143},[163],{"type":46,"value":164}," Namespace\n",{"type":40,"tag":124,"props":166,"children":168},{"class":126,"line":167},3,[169,174],{"type":40,"tag":124,"props":170,"children":171},{"style":131},[172],{"type":46,"value":173},"metadata",{"type":40,"tag":124,"props":175,"children":176},{"style":137},[177],{"type":46,"value":178},":\n",{"type":40,"tag":124,"props":180,"children":182},{"class":126,"line":181},4,[183,188,192],{"type":40,"tag":124,"props":184,"children":185},{"style":131},[186],{"type":46,"value":187},"  name",{"type":40,"tag":124,"props":189,"children":190},{"style":137},[191],{"type":46,"value":140},{"type":40,"tag":124,"props":193,"children":194},{"style":143},[195],{"type":46,"value":196}," tenant-a\n",{"type":40,"tag":124,"props":198,"children":200},{"class":126,"line":199},5,[201,206],{"type":40,"tag":124,"props":202,"children":203},{"style":131},[204],{"type":46,"value":205},"  labels",{"type":40,"tag":124,"props":207,"children":208},{"style":137},[209],{"type":46,"value":178},{"type":40,"tag":124,"props":211,"children":213},{"class":126,"line":212},6,[214,219,223],{"type":40,"tag":124,"props":215,"children":216},{"style":131},[217],{"type":46,"value":218},"    team",{"type":40,"tag":124,"props":220,"children":221},{"style":137},[222],{"type":46,"value":140},{"type":40,"tag":124,"props":224,"children":225},{"style":143},[226],{"type":46,"value":227}," alpha\n",{"type":40,"tag":73,"props":229,"children":231},{"id":230},"_2-configure-rbac-for-least-privilege",[232],{"type":46,"value":233},"2. Configure RBAC for Least Privilege",{"type":40,"tag":49,"props":235,"children":236},{},[237],{"type":46,"value":238},"Role-Based Access Control (RBAC) allows you to control who has access to what resources within a namespace.",{"type":40,"tag":49,"props":240,"children":241},{},[242],{"type":40,"tag":88,"props":243,"children":244},{},[245],{"type":46,"value":92},{"type":40,"tag":94,"props":247,"children":248},{},[249,262],{"type":40,"tag":98,"props":250,"children":251},{},[252,254,260],{"type":46,"value":253},"Define a ",{"type":40,"tag":120,"props":255,"children":257},{"className":256},[],[258],{"type":46,"value":259},"Role",{"type":46,"value":261}," with specific permissions.",{"type":40,"tag":98,"props":263,"children":264},{},[265,267,272,274,280],{"type":46,"value":266},"Bind the ",{"type":40,"tag":120,"props":268,"children":270},{"className":269},[],[271],{"type":46,"value":259},{"type":46,"value":273}," to a user or group using a ",{"type":40,"tag":120,"props":275,"children":277},{"className":276},[],[278],{"type":46,"value":279},"RoleBinding",{"type":46,"value":281},".",{"type":40,"tag":49,"props":283,"children":284},{},[285],{"type":40,"tag":88,"props":286,"children":287},{},[288],{"type":46,"value":289},"Example Role and RoleBinding Manifest:",{"type":40,"tag":112,"props":291,"children":293},{"className":114,"code":292,"language":116,"meta":117,"style":117},"apiVersion: rbac.authorization.k8s.io\u002Fv1\nkind: Role\nmetadata:\n  namespace: tenant-a\n  name: pod-reader\nrules:\n  - apiGroups: [\"\"] # \"\" indicates the core API group\n    resources: [\"pods\"]\n    verbs: [\"get\", \"watch\", \"list\"]\n---\napiVersion: rbac.authorization.k8s.io\u002Fv1\nkind: RoleBinding\nmetadata:\n  name: read-pods\n  namespace: tenant-a\nsubjects:\n  - kind: User\n    name: user@example.com # Name is case sensitive\n    apiGroup: rbac.authorization.k8s.io\nroleRef:\n  kind: Role\n  name: pod-reader\n  apiGroup: rbac.authorization.k8s.io\n",[294],{"type":40,"tag":120,"props":295,"children":296},{"__ignoreMap":117},[297,313,329,340,356,372,384,423,459,529,539,555,572,584,601,617,630,652,675,693,706,723,739],{"type":40,"tag":124,"props":298,"children":299},{"class":126,"line":127},[300,304,308],{"type":40,"tag":124,"props":301,"children":302},{"style":131},[303],{"type":46,"value":134},{"type":40,"tag":124,"props":305,"children":306},{"style":137},[307],{"type":46,"value":140},{"type":40,"tag":124,"props":309,"children":310},{"style":143},[311],{"type":46,"value":312}," rbac.authorization.k8s.io\u002Fv1\n",{"type":40,"tag":124,"props":314,"children":315},{"class":126,"line":149},[316,320,324],{"type":40,"tag":124,"props":317,"children":318},{"style":131},[319],{"type":46,"value":155},{"type":40,"tag":124,"props":321,"children":322},{"style":137},[323],{"type":46,"value":140},{"type":40,"tag":124,"props":325,"children":326},{"style":143},[327],{"type":46,"value":328}," Role\n",{"type":40,"tag":124,"props":330,"children":331},{"class":126,"line":167},[332,336],{"type":40,"tag":124,"props":333,"children":334},{"style":131},[335],{"type":46,"value":173},{"type":40,"tag":124,"props":337,"children":338},{"style":137},[339],{"type":46,"value":178},{"type":40,"tag":124,"props":341,"children":342},{"class":126,"line":181},[343,348,352],{"type":40,"tag":124,"props":344,"children":345},{"style":131},[346],{"type":46,"value":347},"  namespace",{"type":40,"tag":124,"props":349,"children":350},{"style":137},[351],{"type":46,"value":140},{"type":40,"tag":124,"props":353,"children":354},{"style":143},[355],{"type":46,"value":196},{"type":40,"tag":124,"props":357,"children":358},{"class":126,"line":199},[359,363,367],{"type":40,"tag":124,"props":360,"children":361},{"style":131},[362],{"type":46,"value":187},{"type":40,"tag":124,"props":364,"children":365},{"style":137},[366],{"type":46,"value":140},{"type":40,"tag":124,"props":368,"children":369},{"style":143},[370],{"type":46,"value":371}," pod-reader\n",{"type":40,"tag":124,"props":373,"children":374},{"class":126,"line":212},[375,380],{"type":40,"tag":124,"props":376,"children":377},{"style":131},[378],{"type":46,"value":379},"rules",{"type":40,"tag":124,"props":381,"children":382},{"style":137},[383],{"type":46,"value":178},{"type":40,"tag":124,"props":385,"children":387},{"class":126,"line":386},7,[388,393,398,402,407,412,417],{"type":40,"tag":124,"props":389,"children":390},{"style":137},[391],{"type":46,"value":392},"  -",{"type":40,"tag":124,"props":394,"children":395},{"style":131},[396],{"type":46,"value":397}," apiGroups",{"type":40,"tag":124,"props":399,"children":400},{"style":137},[401],{"type":46,"value":140},{"type":40,"tag":124,"props":403,"children":404},{"style":137},[405],{"type":46,"value":406}," [",{"type":40,"tag":124,"props":408,"children":409},{"style":137},[410],{"type":46,"value":411},"\"\"",{"type":40,"tag":124,"props":413,"children":414},{"style":137},[415],{"type":46,"value":416},"]",{"type":40,"tag":124,"props":418,"children":420},{"style":419},"--shiki-light:#90A4AE;--shiki-light-font-style:italic;--shiki-default:#546E7A;--shiki-default-font-style:italic;--shiki-dark:#676E95;--shiki-dark-font-style:italic",[421],{"type":46,"value":422}," # \"\" indicates the core API group\n",{"type":40,"tag":124,"props":424,"children":426},{"class":126,"line":425},8,[427,432,436,440,445,450,454],{"type":40,"tag":124,"props":428,"children":429},{"style":131},[430],{"type":46,"value":431},"    resources",{"type":40,"tag":124,"props":433,"children":434},{"style":137},[435],{"type":46,"value":140},{"type":40,"tag":124,"props":437,"children":438},{"style":137},[439],{"type":46,"value":406},{"type":40,"tag":124,"props":441,"children":442},{"style":137},[443],{"type":46,"value":444},"\"",{"type":40,"tag":124,"props":446,"children":447},{"style":143},[448],{"type":46,"value":449},"pods",{"type":40,"tag":124,"props":451,"children":452},{"style":137},[453],{"type":46,"value":444},{"type":40,"tag":124,"props":455,"children":456},{"style":137},[457],{"type":46,"value":458},"]\n",{"type":40,"tag":124,"props":460,"children":462},{"class":126,"line":461},9,[463,468,472,476,480,485,489,494,499,504,508,512,516,521,525],{"type":40,"tag":124,"props":464,"children":465},{"style":131},[466],{"type":46,"value":467},"    verbs",{"type":40,"tag":124,"props":469,"children":470},{"style":137},[471],{"type":46,"value":140},{"type":40,"tag":124,"props":473,"children":474},{"style":137},[475],{"type":46,"value":406},{"type":40,"tag":124,"props":477,"children":478},{"style":137},[479],{"type":46,"value":444},{"type":40,"tag":124,"props":481,"children":482},{"style":143},[483],{"type":46,"value":484},"get",{"type":40,"tag":124,"props":486,"children":487},{"style":137},[488],{"type":46,"value":444},{"type":40,"tag":124,"props":490,"children":491},{"style":137},[492],{"type":46,"value":493},",",{"type":40,"tag":124,"props":495,"children":496},{"style":137},[497],{"type":46,"value":498}," \"",{"type":40,"tag":124,"props":500,"children":501},{"style":143},[502],{"type":46,"value":503},"watch",{"type":40,"tag":124,"props":505,"children":506},{"style":137},[507],{"type":46,"value":444},{"type":40,"tag":124,"props":509,"children":510},{"style":137},[511],{"type":46,"value":493},{"type":40,"tag":124,"props":513,"children":514},{"style":137},[515],{"type":46,"value":498},{"type":40,"tag":124,"props":517,"children":518},{"style":143},[519],{"type":46,"value":520},"list",{"type":40,"tag":124,"props":522,"children":523},{"style":137},[524],{"type":46,"value":444},{"type":40,"tag":124,"props":526,"children":527},{"style":137},[528],{"type":46,"value":458},{"type":40,"tag":124,"props":530,"children":532},{"class":126,"line":531},10,[533],{"type":40,"tag":124,"props":534,"children":536},{"style":535},"--shiki-light:#E2931D;--shiki-default:#FFCB6B;--shiki-dark:#FFCB6B",[537],{"type":46,"value":538},"---\n",{"type":40,"tag":124,"props":540,"children":542},{"class":126,"line":541},11,[543,547,551],{"type":40,"tag":124,"props":544,"children":545},{"style":131},[546],{"type":46,"value":134},{"type":40,"tag":124,"props":548,"children":549},{"style":137},[550],{"type":46,"value":140},{"type":40,"tag":124,"props":552,"children":553},{"style":143},[554],{"type":46,"value":312},{"type":40,"tag":124,"props":556,"children":558},{"class":126,"line":557},12,[559,563,567],{"type":40,"tag":124,"props":560,"children":561},{"style":131},[562],{"type":46,"value":155},{"type":40,"tag":124,"props":564,"children":565},{"style":137},[566],{"type":46,"value":140},{"type":40,"tag":124,"props":568,"children":569},{"style":143},[570],{"type":46,"value":571}," RoleBinding\n",{"type":40,"tag":124,"props":573,"children":575},{"class":126,"line":574},13,[576,580],{"type":40,"tag":124,"props":577,"children":578},{"style":131},[579],{"type":46,"value":173},{"type":40,"tag":124,"props":581,"children":582},{"style":137},[583],{"type":46,"value":178},{"type":40,"tag":124,"props":585,"children":587},{"class":126,"line":586},14,[588,592,596],{"type":40,"tag":124,"props":589,"children":590},{"style":131},[591],{"type":46,"value":187},{"type":40,"tag":124,"props":593,"children":594},{"style":137},[595],{"type":46,"value":140},{"type":40,"tag":124,"props":597,"children":598},{"style":143},[599],{"type":46,"value":600}," read-pods\n",{"type":40,"tag":124,"props":602,"children":604},{"class":126,"line":603},15,[605,609,613],{"type":40,"tag":124,"props":606,"children":607},{"style":131},[608],{"type":46,"value":347},{"type":40,"tag":124,"props":610,"children":611},{"style":137},[612],{"type":46,"value":140},{"type":40,"tag":124,"props":614,"children":615},{"style":143},[616],{"type":46,"value":196},{"type":40,"tag":124,"props":618,"children":620},{"class":126,"line":619},16,[621,626],{"type":40,"tag":124,"props":622,"children":623},{"style":131},[624],{"type":46,"value":625},"subjects",{"type":40,"tag":124,"props":627,"children":628},{"style":137},[629],{"type":46,"value":178},{"type":40,"tag":124,"props":631,"children":633},{"class":126,"line":632},17,[634,638,643,647],{"type":40,"tag":124,"props":635,"children":636},{"style":137},[637],{"type":46,"value":392},{"type":40,"tag":124,"props":639,"children":640},{"style":131},[641],{"type":46,"value":642}," kind",{"type":40,"tag":124,"props":644,"children":645},{"style":137},[646],{"type":46,"value":140},{"type":40,"tag":124,"props":648,"children":649},{"style":143},[650],{"type":46,"value":651}," User\n",{"type":40,"tag":124,"props":653,"children":655},{"class":126,"line":654},18,[656,661,665,670],{"type":40,"tag":124,"props":657,"children":658},{"style":131},[659],{"type":46,"value":660},"    name",{"type":40,"tag":124,"props":662,"children":663},{"style":137},[664],{"type":46,"value":140},{"type":40,"tag":124,"props":666,"children":667},{"style":143},[668],{"type":46,"value":669}," user@example.com",{"type":40,"tag":124,"props":671,"children":672},{"style":419},[673],{"type":46,"value":674}," # Name is case sensitive\n",{"type":40,"tag":124,"props":676,"children":678},{"class":126,"line":677},19,[679,684,688],{"type":40,"tag":124,"props":680,"children":681},{"style":131},[682],{"type":46,"value":683},"    apiGroup",{"type":40,"tag":124,"props":685,"children":686},{"style":137},[687],{"type":46,"value":140},{"type":40,"tag":124,"props":689,"children":690},{"style":143},[691],{"type":46,"value":692}," rbac.authorization.k8s.io\n",{"type":40,"tag":124,"props":694,"children":696},{"class":126,"line":695},20,[697,702],{"type":40,"tag":124,"props":698,"children":699},{"style":131},[700],{"type":46,"value":701},"roleRef",{"type":40,"tag":124,"props":703,"children":704},{"style":137},[705],{"type":46,"value":178},{"type":40,"tag":124,"props":707,"children":709},{"class":126,"line":708},21,[710,715,719],{"type":40,"tag":124,"props":711,"children":712},{"style":131},[713],{"type":46,"value":714},"  kind",{"type":40,"tag":124,"props":716,"children":717},{"style":137},[718],{"type":46,"value":140},{"type":40,"tag":124,"props":720,"children":721},{"style":143},[722],{"type":46,"value":328},{"type":40,"tag":124,"props":724,"children":726},{"class":126,"line":725},22,[727,731,735],{"type":40,"tag":124,"props":728,"children":729},{"style":131},[730],{"type":46,"value":187},{"type":40,"tag":124,"props":732,"children":733},{"style":137},[734],{"type":46,"value":140},{"type":40,"tag":124,"props":736,"children":737},{"style":143},[738],{"type":46,"value":371},{"type":40,"tag":124,"props":740,"children":742},{"class":126,"line":741},23,[743,748,752],{"type":40,"tag":124,"props":744,"children":745},{"style":131},[746],{"type":46,"value":747},"  apiGroup",{"type":40,"tag":124,"props":749,"children":750},{"style":137},[751],{"type":46,"value":140},{"type":40,"tag":124,"props":753,"children":754},{"style":143},[755],{"type":46,"value":692},{"type":40,"tag":73,"props":757,"children":759},{"id":758},"_3-enforce-resource-quotas",[760],{"type":46,"value":761},"3. Enforce Resource Quotas",{"type":40,"tag":49,"props":763,"children":764},{},[765],{"type":46,"value":766},"Resource quotas prevent a single tenant from consuming all resources in the cluster.",{"type":40,"tag":49,"props":768,"children":769},{},[770],{"type":40,"tag":88,"props":771,"children":772},{},[773],{"type":46,"value":774},"Example ResourceQuota Manifest:",{"type":40,"tag":112,"props":776,"children":778},{"className":114,"code":777,"language":116,"meta":117,"style":117},"apiVersion: v1\nkind: ResourceQuota\nmetadata:\n  name: tenant-a-quota\n  namespace: tenant-a\nspec:\n  hard:\n    requests.cpu: \"2\"\n    requests.memory: 4Gi\n    limits.cpu: \"4\"\n    limits.memory: 8Gi\n",[779],{"type":40,"tag":120,"props":780,"children":781},{"__ignoreMap":117},[782,797,813,824,840,855,867,879,905,922,947],{"type":40,"tag":124,"props":783,"children":784},{"class":126,"line":127},[785,789,793],{"type":40,"tag":124,"props":786,"children":787},{"style":131},[788],{"type":46,"value":134},{"type":40,"tag":124,"props":790,"children":791},{"style":137},[792],{"type":46,"value":140},{"type":40,"tag":124,"props":794,"children":795},{"style":143},[796],{"type":46,"value":146},{"type":40,"tag":124,"props":798,"children":799},{"class":126,"line":149},[800,804,808],{"type":40,"tag":124,"props":801,"children":802},{"style":131},[803],{"type":46,"value":155},{"type":40,"tag":124,"props":805,"children":806},{"style":137},[807],{"type":46,"value":140},{"type":40,"tag":124,"props":809,"children":810},{"style":143},[811],{"type":46,"value":812}," ResourceQuota\n",{"type":40,"tag":124,"props":814,"children":815},{"class":126,"line":167},[816,820],{"type":40,"tag":124,"props":817,"children":818},{"style":131},[819],{"type":46,"value":173},{"type":40,"tag":124,"props":821,"children":822},{"style":137},[823],{"type":46,"value":178},{"type":40,"tag":124,"props":825,"children":826},{"class":126,"line":181},[827,831,835],{"type":40,"tag":124,"props":828,"children":829},{"style":131},[830],{"type":46,"value":187},{"type":40,"tag":124,"props":832,"children":833},{"style":137},[834],{"type":46,"value":140},{"type":40,"tag":124,"props":836,"children":837},{"style":143},[838],{"type":46,"value":839}," tenant-a-quota\n",{"type":40,"tag":124,"props":841,"children":842},{"class":126,"line":199},[843,847,851],{"type":40,"tag":124,"props":844,"children":845},{"style":131},[846],{"type":46,"value":347},{"type":40,"tag":124,"props":848,"children":849},{"style":137},[850],{"type":46,"value":140},{"type":40,"tag":124,"props":852,"children":853},{"style":143},[854],{"type":46,"value":196},{"type":40,"tag":124,"props":856,"children":857},{"class":126,"line":212},[858,863],{"type":40,"tag":124,"props":859,"children":860},{"style":131},[861],{"type":46,"value":862},"spec",{"type":40,"tag":124,"props":864,"children":865},{"style":137},[866],{"type":46,"value":178},{"type":40,"tag":124,"props":868,"children":869},{"class":126,"line":386},[870,875],{"type":40,"tag":124,"props":871,"children":872},{"style":131},[873],{"type":46,"value":874},"  hard",{"type":40,"tag":124,"props":876,"children":877},{"style":137},[878],{"type":46,"value":178},{"type":40,"tag":124,"props":880,"children":881},{"class":126,"line":425},[882,887,891,895,900],{"type":40,"tag":124,"props":883,"children":884},{"style":131},[885],{"type":46,"value":886},"    requests.cpu",{"type":40,"tag":124,"props":888,"children":889},{"style":137},[890],{"type":46,"value":140},{"type":40,"tag":124,"props":892,"children":893},{"style":137},[894],{"type":46,"value":498},{"type":40,"tag":124,"props":896,"children":897},{"style":143},[898],{"type":46,"value":899},"2",{"type":40,"tag":124,"props":901,"children":902},{"style":137},[903],{"type":46,"value":904},"\"\n",{"type":40,"tag":124,"props":906,"children":907},{"class":126,"line":461},[908,913,917],{"type":40,"tag":124,"props":909,"children":910},{"style":131},[911],{"type":46,"value":912},"    requests.memory",{"type":40,"tag":124,"props":914,"children":915},{"style":137},[916],{"type":46,"value":140},{"type":40,"tag":124,"props":918,"children":919},{"style":143},[920],{"type":46,"value":921}," 4Gi\n",{"type":40,"tag":124,"props":923,"children":924},{"class":126,"line":531},[925,930,934,938,943],{"type":40,"tag":124,"props":926,"children":927},{"style":131},[928],{"type":46,"value":929},"    limits.cpu",{"type":40,"tag":124,"props":931,"children":932},{"style":137},[933],{"type":46,"value":140},{"type":40,"tag":124,"props":935,"children":936},{"style":137},[937],{"type":46,"value":498},{"type":40,"tag":124,"props":939,"children":940},{"style":143},[941],{"type":46,"value":942},"4",{"type":40,"tag":124,"props":944,"children":945},{"style":137},[946],{"type":46,"value":904},{"type":40,"tag":124,"props":948,"children":949},{"class":126,"line":541},[950,955,959],{"type":40,"tag":124,"props":951,"children":952},{"style":131},[953],{"type":46,"value":954},"    limits.memory",{"type":40,"tag":124,"props":956,"children":957},{"style":137},[958],{"type":46,"value":140},{"type":40,"tag":124,"props":960,"children":961},{"style":143},[962],{"type":46,"value":963}," 8Gi\n",{"type":40,"tag":55,"props":965,"children":967},{"id":966},"best-practices",[968],{"type":46,"value":969},"Best Practices",{"type":40,"tag":94,"props":971,"children":972},{},[973,983,993,1003],{"type":40,"tag":98,"props":974,"children":975},{},[976,981],{"type":40,"tag":88,"props":977,"children":978},{},[979],{"type":46,"value":980},"Namespace Per Tenant",{"type":46,"value":982},": Always use separate namespaces for different teams or applications.",{"type":40,"tag":98,"props":984,"children":985},{},[986,991],{"type":40,"tag":88,"props":987,"children":988},{},[989],{"type":46,"value":990},"Least Privilege RBAC",{"type":46,"value":992},": Grant only the permissions necessary for users and service accounts to do their jobs.",{"type":40,"tag":98,"props":994,"children":995},{},[996,1001],{"type":40,"tag":88,"props":997,"children":998},{},[999],{"type":46,"value":1000},"Enforce Quotas",{"type":46,"value":1002},": Use Resource Quotas to ensure fair sharing of cluster resources.",{"type":40,"tag":98,"props":1004,"children":1005},{},[1006,1011,1013,1020],{"type":40,"tag":88,"props":1007,"children":1008},{},[1009],{"type":46,"value":1010},"Network Policies",{"type":46,"value":1012},": Combine namespaces with Network Policies (see ",{"type":40,"tag":1014,"props":1015,"children":1017},"a",{"href":1016},"..\u002Fgke-workload-security\u002FSKILL.md",[1018],{"type":46,"value":1019},"gke-workload-security",{"type":46,"value":1021},") to restrict cross-tenant traffic.",{"type":40,"tag":1023,"props":1024,"children":1025},"style",{},[1026],{"type":46,"value":1027},"html .light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html.light .shiki span {color: var(--shiki-light);background: var(--shiki-light-bg);font-style: var(--shiki-light-font-style);font-weight: var(--shiki-light-font-weight);text-decoration: var(--shiki-light-text-decoration);}html .default .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .shiki span {color: var(--shiki-default);background: var(--shiki-default-bg);font-style: var(--shiki-default-font-style);font-weight: var(--shiki-default-font-weight);text-decoration: var(--shiki-default-text-decoration);}html .dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}html.dark .shiki span {color: var(--shiki-dark);background: var(--shiki-dark-bg);font-style: var(--shiki-dark-font-style);font-weight: var(--shiki-dark-font-weight);text-decoration: var(--shiki-dark-text-decoration);}",{"items":1029,"total":1127},[1030,1042,1057,1070,1087,1098,1114],{"slug":1031,"name":1031,"fn":1032,"description":1033,"org":1034,"tags":1035,"stars":24,"repoUrl":25,"updatedAt":1041},"custom-golden-image-discovery","discover golden base images for GKE nodes","Expert at discovering golden base images for GKE custom nodes using technical specs or context clues.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1036,1039,1040],{"name":1037,"slug":1038,"type":16},"Deployment","deployment",{"name":9,"slug":8,"type":16},{"name":21,"slug":22,"type":16},"2026-07-12T07:39:30.888879",{"slug":1043,"name":1043,"fn":1044,"description":1045,"org":1046,"tags":1047,"stars":24,"repoUrl":25,"updatedAt":1056},"gke-ai-troubleshooting-handle-disruption-gpu-tpu","diagnose GPU and TPU workload disruptions","Diagnose and predict node disruption during Compute Engine host maintenance for GPU and TPU workloads.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1048,1051,1052,1053],{"name":1049,"slug":1050,"type":16},"Debugging","debugging",{"name":9,"slug":8,"type":16},{"name":21,"slug":22,"type":16},{"name":1054,"slug":1055,"type":16},"Performance","performance","2026-07-28T05:34:18.149515",{"slug":1058,"name":1058,"fn":1059,"description":1060,"org":1061,"tags":1062,"stars":24,"repoUrl":25,"updatedAt":1069},"gke-ai-troubleshooting-jobset-interruption","diagnose GKE JobSet interruptions","Systematically diagnose GKE JobSet interruptions, restarts, and preemptions for AI\u002FML training workloads. Identifies preemption events, maintenance interruptions, bad host VMs, unhealthy pods, and coordinator worker failures.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1063,1064,1065,1066],{"name":1049,"slug":1050,"type":16},{"name":9,"slug":8,"type":16},{"name":21,"slug":22,"type":16},{"name":1067,"slug":1068,"type":16},"Observability","observability","2026-07-12T07:40:04.511878",{"slug":1071,"name":1071,"fn":1072,"description":1073,"org":1074,"tags":1075,"stars":24,"repoUrl":25,"updatedAt":1086},"gke-ai-troubleshooting-skill-creation-guide","create GKE troubleshooting skill bundles","Expert instructions for building high-quality GKE troubleshooting skills. Codifies Step 0 context rules, zero-hallucination signatures, and explicit LQL\u002FPromQL query requirements.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1076,1079,1082,1083],{"name":1077,"slug":1078,"type":16},"Documentation","documentation",{"name":1080,"slug":1081,"type":16},"Engineering","engineering",{"name":9,"slug":8,"type":16},{"name":1084,"slug":1085,"type":16},"Technical Writing","technical-writing","2026-07-12T07:39:50.73484",{"slug":1088,"name":1088,"fn":1089,"description":1090,"org":1091,"tags":1092,"stars":24,"repoUrl":25,"updatedAt":1097},"gke-ai-troubleshooting-tpu-connection-failure-vbar-oom","diagnose GKE TPU connection failures","Diagnose and prevent `vbar_control_agent` segfaults and OOMs caused by race conditions during TPU device resets and frequent metrics collection (e.g. every 3s). Use when TPU slice initialization fails or `vbar_control_agent` crashes on TPU v6e nodes.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1093,1094,1095,1096],{"name":1049,"slug":1050,"type":16},{"name":9,"slug":8,"type":16},{"name":21,"slug":22,"type":16},{"name":1054,"slug":1055,"type":16},"2026-07-12T07:39:49.482979",{"slug":1099,"name":1099,"fn":1100,"description":1101,"org":1102,"tags":1103,"stars":24,"repoUrl":25,"updatedAt":1113},"gke-app-onboarding","containerize and deploy apps to GKE","Workflows for containerizing and deploying applications to GKE for the first time.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1104,1107,1108,1109,1110],{"name":1105,"slug":1106,"type":16},"Containers","containers",{"name":1037,"slug":1038,"type":16},{"name":9,"slug":8,"type":16},{"name":21,"slug":22,"type":16},{"name":1111,"slug":1112,"type":16},"Onboarding","onboarding","2026-07-12T07:39:41.935837",{"slug":1115,"name":1115,"fn":1116,"description":1117,"org":1118,"tags":1119,"stars":24,"repoUrl":25,"updatedAt":1126},"gke-backup-dr","configure GKE backup and disaster recovery","Workflows for configuring Backup for GKE and disaster recovery.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1120,1121,1122,1123],{"name":1037,"slug":1038,"type":16},{"name":9,"slug":8,"type":16},{"name":21,"slug":22,"type":16},{"name":1124,"slug":1125,"type":16},"Operations","operations","2026-07-12T07:39:34.806995",25,{"items":1129,"total":1310},[1130,1146,1162,1182,1196,1205,1219,1236,1253,1266,1282,1292],{"slug":1131,"name":1131,"fn":1132,"description":1133,"org":1134,"tags":1135,"stars":1143,"repoUrl":1144,"updatedAt":1145},"kb-search","search and extract local knowledge base documents","Allows listing, searching and extracting information from local knowledge base documents for information about tables\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1136,1137,1140],{"name":1077,"slug":1078,"type":16},{"name":1138,"slug":1139,"type":16},"Knowledge Base","knowledge-base",{"name":1141,"slug":1142,"type":16},"Search","search",6749,"https:\u002F\u002Fgithub.com\u002FGoogleCloudPlatform\u002Fknowledge-catalog","2026-07-12T07:38:52.157375",{"slug":1147,"name":1148,"fn":1149,"description":1150,"org":1151,"tags":1152,"stars":1143,"repoUrl":1144,"updatedAt":1161},"knowledgecatalogdiscoveryagent","knowledge_catalog_discovery_agent","search and rank Knowledge Catalog data entries","Analyzes user queries, extracts relevant predicates, and utilizes Knowledge Catalog Search to find and rank the most relevant data entries. Engages with the user throughout the process.\n",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1153,1156,1157,1160],{"name":1154,"slug":1155,"type":16},"Data Analysis","data-analysis",{"name":9,"slug":8,"type":16},{"name":1158,"slug":1159,"type":16},"Knowledge Management","knowledge-management",{"name":1141,"slug":1142,"type":16},"2026-07-12T07:38:22.196851",{"slug":1163,"name":1163,"fn":1164,"description":1165,"org":1166,"tags":1167,"stars":1179,"repoUrl":1180,"updatedAt":1181},"contributing","contribute to Cloud Foundation Fabric","End-to-end workflow for contributing to Cloud Foundation Fabric: triaging GitHub issues, proactive feature development, validating with tests and Policy Troubleshooter, and submitting sanitized Pull Requests. Use when addressing a Fabric GitHub issue, developing a module or FAST stage change, or preparing a branch for a pull request.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1168,1171,1172,1175,1176],{"name":1169,"slug":1170,"type":16},"Automation","automation",{"name":1080,"slug":1081,"type":16},{"name":1173,"slug":1174,"type":16},"GitHub","github",{"name":9,"slug":8,"type":16},{"name":1177,"slug":1178,"type":16},"Pull Requests","pull-requests",2062,"https:\u002F\u002Fgithub.com\u002FGoogleCloudPlatform\u002Fcloud-foundation-fabric","2026-07-31T06:23:36.935005",{"slug":1183,"name":1183,"fn":1184,"description":1185,"org":1186,"tags":1187,"stars":1179,"repoUrl":1180,"updatedAt":1195},"fabric-builder","generate Terraform code for Google Cloud","Generates idiomatic Cloud Foundation Fabric (CFF) Terraform code using CFF modules. Use when users ask to create GCP resources, use Fabric modules, or generate Terraform code for Google Cloud.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1188,1189,1192],{"name":9,"slug":8,"type":16},{"name":1190,"slug":1191,"type":16},"Infrastructure as Code","infrastructure-as-code",{"name":1193,"slug":1194,"type":16},"Terraform","terraform","2026-07-12T07:38:23.514555",{"slug":1197,"name":1197,"fn":1198,"description":1199,"org":1200,"tags":1201,"stars":1179,"repoUrl":1180,"updatedAt":1204},"fast-0-org-setup-prereqs","prepare prerequisites for FAST 0-org-setup","Guides the user step-by-step through the prerequisites for the FAST 0-org-setup stage, supporting both Standard GCP and Google Cloud Dedicated (GCD) environments. Use when a user asks to prepare or run prerequisites for 0-org-setup or bootstrap the FAST landing zone.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1202,1203],{"name":9,"slug":8,"type":16},{"name":1124,"slug":1125,"type":16},"2026-07-12T07:38:28.127148",{"slug":1206,"name":1206,"fn":1207,"description":1208,"org":1209,"tags":1210,"stars":1216,"repoUrl":1217,"updatedAt":1218},"agent-aware-cli","design agent-aware command-line interfaces","Guide for designing and implementing command-line interfaces (CLIs) that are equally usable by human developers and automated coding agents. Use when the user wants to build a CLI, apply CLI best practices, or use Go with Cobra and Viper.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1211,1214,1215],{"name":1212,"slug":1213,"type":16},"CLI","cli",{"name":1080,"slug":1081,"type":16},{"name":9,"slug":8,"type":16},1150,"https:\u002F\u002Fgithub.com\u002FGoogleCloudPlatform\u002Fvertex-ai-creative-studio","2026-07-12T07:39:08.41406",{"slug":1220,"name":1220,"fn":1221,"description":1222,"org":1223,"tags":1224,"stars":1216,"repoUrl":1217,"updatedAt":1235},"build-mcp-genmedia","build and configure GenAI MCP servers","Builds the mcp-genmedia Go MCP servers (nanobanana, veo, lyria, gemini-multimodal, chirp3-hd, avtool) from source and wires them into settings.json. Use this skill whenever the MCP tools are missing or broken — typically at the start of a new session, after a container restart, or when \u002Ftmp has been wiped. The prebuilt binaries in \u002Fworkspace\u002F.local\u002Fbin\u002F have no exec bit and live on a noexec mount; this skill compiles fresh executables into \u002Ftmp\u002Fbin\u002F where execution is allowed.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1225,1228,1229,1232],{"name":1226,"slug":1227,"type":16},"API Development","api-development",{"name":9,"slug":8,"type":16},{"name":1230,"slug":1231,"type":16},"LLM","llm",{"name":1233,"slug":1234,"type":16},"MCP","mcp","2026-07-12T07:39:10.911302",{"slug":1237,"name":1237,"fn":1238,"description":1239,"org":1240,"tags":1241,"stars":1216,"repoUrl":1217,"updatedAt":1252},"genmedia-audio-engineer","synthesize and mix audio content","Expert in audio synthesis, music generation, and mixing. Use when creating podcasts, background scores, or multi-track audio layering using mcp-chirp3-go, mcp-lyria-go, mcp-gemini-go, mcp-nanobanana-go, and mcp-avtool-go.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1242,1245,1248,1249],{"name":1243,"slug":1244,"type":16},"Audio","audio",{"name":1246,"slug":1247,"type":16},"Creative","creative",{"name":9,"slug":8,"type":16},{"name":1250,"slug":1251,"type":16},"Vertex AI","vertex-ai","2026-07-12T07:39:16.623879",{"slug":1254,"name":1254,"fn":1255,"description":1256,"org":1257,"tags":1258,"stars":1216,"repoUrl":1217,"updatedAt":1265},"genmedia-image-artist","generate and edit AI images","Expert in AI image generation and editing. Use when the user needs high-quality textures, character-consistent visuals, or image-to-image editing using mcp-nanobanana-go.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1259,1260,1261,1264],{"name":1246,"slug":1247,"type":16},{"name":9,"slug":8,"type":16},{"name":1262,"slug":1263,"type":16},"Image Generation","image-generation",{"name":1250,"slug":1251,"type":16},"2026-07-12T07:39:15.372822",{"slug":1267,"name":1267,"fn":1268,"description":1269,"org":1270,"tags":1271,"stars":1216,"repoUrl":1217,"updatedAt":1281},"genmedia-producer","produce multi-step media content","Expert media production assistant. Use when requested to help with storyboarding, podcast creation, audio assembly, or complex multi-step media workflows using the GenMedia MCP servers (Veo, Lyria, Gemini TTS, NanoBanana).",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1272,1273,1274,1275,1278],{"name":1243,"slug":1244,"type":16},{"name":1246,"slug":1247,"type":16},{"name":9,"slug":8,"type":16},{"name":1276,"slug":1277,"type":16},"Media","media",{"name":1279,"slug":1280,"type":16},"Video","video","2026-07-12T07:39:09.672849",{"slug":1283,"name":1283,"fn":1284,"description":1285,"org":1286,"tags":1287,"stars":1216,"repoUrl":1217,"updatedAt":1291},"genmedia-video-editor","edit and compose video content","Expert in video composition, editing, and format conversion. Use when the user wants to generate high-quality video, overlay images on video, concatenate clips, create GIFs, or sync audio to video using mcp-avtool-go and mcp-veo-go.",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1288,1289,1290],{"name":1246,"slug":1247,"type":16},{"name":9,"slug":8,"type":16},{"name":1279,"slug":1280,"type":16},"2026-07-12T07:39:13.749081",{"slug":1293,"name":1293,"fn":1294,"description":1295,"org":1296,"tags":1297,"stars":1216,"repoUrl":1217,"updatedAt":1309},"genmedia-voice-director","generate expressive text-to-speech with Gemini","Expert in casting, directing, and generating expressive text-to-speech using Gemini TTS. Use this when the user needs virtual voice actor personas, expressive speech generation, or multiple variations of a voiceover (like \"take 3 on the bounce\").",{"slug":8,"name":9,"logoUrl":10,"githubOrg":11},[1298,1299,1300,1303,1306],{"name":1243,"slug":1244,"type":16},{"name":1246,"slug":1247,"type":16},{"name":1301,"slug":1302,"type":16},"Gemini","gemini",{"name":1304,"slug":1305,"type":16},"Speech","speech",{"name":1307,"slug":1308,"type":16},"Text-to-Speech","text-to-speech","2026-07-12T07:39:17.86673",80]