Senior DevOps Toolkit
maslennikov-ig/claude-code-orchestrator-kit
Comprehensive DevOps skill for CI/CD, infrastructure automation, containerization, and cloud platforms (AWS, GCP, Azure). Includes pipeline setup…
Manages GKE application onboarding, covering containerization, deployment manifests, and migration.
Install Gke App Onboarding
$ npx skills add google/skills --skill gke-app-onboarding -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install google/skills gke-app-onboarding --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/google/skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/cloud/gke-app-onboarding .claude/skills/gke-app-onboarding && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "gke-app-onboarding" agent skill from https://github.com/google/skills/tree/main/skills/cloud/gke-app-onboarding into .claude/skills/gke-app-onboarding/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gke-app-onboarding", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/google/skills/tree/main/skills/cloud/gke-app-onboardingType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add google/skills --skill gke-app-onboarding -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install google/skills gke-app-onboarding --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/google/skills.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/cloud/gke-app-onboarding .agents/skills/gke-app-onboarding && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "gke-app-onboarding" agent skill from https://github.com/google/skills/tree/main/skills/cloud/gke-app-onboarding into .agents/skills/gke-app-onboarding/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gke-app-onboarding", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add google/skills --skill gke-app-onboarding -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install google/skills gke-app-onboarding --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/google/skills.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/cloud/gke-app-onboarding .cursor/skills/gke-app-onboarding && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "gke-app-onboarding" agent skill from https://github.com/google/skills/tree/main/skills/cloud/gke-app-onboarding into .cursor/skills/gke-app-onboarding/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gke-app-onboarding", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/google/skills.git --path skills/cloud/gke-app-onboarding--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add google/skills --skill gke-app-onboarding -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install google/skills gke-app-onboarding --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/google/skills.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/cloud/gke-app-onboarding .gemini/skills/gke-app-onboarding && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "gke-app-onboarding" agent skill from https://github.com/google/skills/tree/main/skills/cloud/gke-app-onboarding into .gemini/skills/gke-app-onboarding/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gke-app-onboarding", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install google/skills gke-app-onboardingInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add google/skills --skill gke-app-onboarding -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/google/skills.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/cloud/gke-app-onboarding .github/skills/gke-app-onboarding && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "gke-app-onboarding" agent skill from https://github.com/google/skills/tree/main/skills/cloud/gke-app-onboarding into .github/skills/gke-app-onboarding/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gke-app-onboarding", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add google/skills --skill gke-app-onboarding -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install google/skills gke-app-onboarding --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/google/skills.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/cloud/gke-app-onboarding .opencode/skills/gke-app-onboarding && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "gke-app-onboarding" agent skill from https://github.com/google/skills/tree/main/skills/cloud/gke-app-onboarding into .opencode/skills/gke-app-onboarding/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "gke-app-onboarding", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
Facts
- Skill name
gke-app-onboarding- GitHub stars
- 21k
- Token cost
- ~1.4k tokens
- SKILL.md length
- 476 words
- Files
- 7 (incl. references, assets)
- Skills in repo
- 147
- Repo updated
- First seen
- Licence
- Apache-2.0
At a glance
Manages GKE application onboarding, covering containerization, deployment manifests, and migration.
- Works in 5 steps: App Assessment → Containerization → Image Management → …
- Deploying an application to GKE for the first time
- SKILL.md covers Workflow, Golden Path Onboarding Checklist and Next Steps
- Runs JavaScript scripts from its folder; calls kubectl, gcloud and docker
What it does
Gke App Onboarding is an agent skill from google/skills, published by the product's own GitHub organization. Manages GKE application onboarding, covering containerization, deployment manifests, and migration. Use when onboarding or deploying an application to GKE for the first time, or containerizing an app for GKE. Don't use for general GKE cluster administration or upgrades (use gke-basics or gke-upgrades instead).
Its SKILL.md is about 1.4k tokens, which your agent loads only when the skill is triggered. The skill folder holds 8 other files, including reference files and assets (for example `assets/deployment.yaml`, `assets/index.js` and `assets/package-lock.json`).
It sits in DevOps & Cloud, covering Containers and Deployment. It works with Google Kubernetes Engine, Kubernetes and Docker. The repository describes itself as: Agent Skills for Google products and technologies. The licence is Apache-2.0.
When your agent uses it
- Deploying an application to GKE for the first time
- Containerizing an app for GKE
- General GKE cluster administration
- Upgrades (use gke-basics
Example prompts
- “Use the gke-app-onboarding skill to manage GKE application onboarding, covering containerization, deployment manifests, and migration”
- “/gke-app-onboarding”
Requirements
- Node.js
- Docker
Workflow steps
5 steps, taken from the step headings in SKILL.md.
What it can do on your machine
Read from SKILL.md and the folder at commit 5120a76. It shows what the files ask for, not the result of running them.
Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships script files (JavaScript), which the agent can run.
Shell commands in SKILL.md call:
kubectlgclouddocker
From the folder's file list and the shell code blocks in SKILL.md.
Network
Links to these hosts (documentation or services it may open):
buildpacks.io
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Context cost
Gke App Onboarding loads about 1.4k tokens when it runs, and up to ~1.9k if it reads all its reference files. Until then it costs about 83 tokens; SKILL.md has 476 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
Safety
Auto-check passed
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
SKILL.md
The full file from google/skills at commit 5120a76, republished under its Apache-2.0 licence (© google). 476 words, ~1,402 tokens.
Download SKILL.mdSave it as
.claude/skills/gke-app-onboarding/SKILL.md (or your agent's skills folder). This skill also uses 6 other files; get the full folder from GitHub.- name
- gke-app-onboarding
- description
- Manages GKE application onboarding, covering containerization, deployment manifests, and migration. Use when onboarding or deploying an application to GKE for the first time, or containerizing an app for GKE. Don't use for general GKE cluster administration or upgrades (use gke-basics or gke-upgrades instead).
- metadata.version
- 1.0.0
- metadata.category
- Containers
GKE App Onboarding
This reference provides workflows for containerizing and deploying applications to GKE for the first time.
MCP Tools:
apply_k8s_manifest,get_k8s_resource,get_k8s_rollout_status,get_k8s_logs,describe_k8s_resource
Workflow
1. App Assessment
Before containerizing, assess the application:
- Language & Framework: Identify the tech stack
- Dependencies: List required libraries and external services
- Configuration: How is the app configured? (env vars, config files, secrets)
- Statefulness: Does it need persistent storage? (databases, file storage)
- Networking: Port mapping and protocol (HTTP, gRPC, TCP)
- Health endpoints: Does the app expose health check endpoints?
2. Containerization
Create a container image. A Dockerfile with a multi-stage build is recommended
for most apps — see the Go Dockerfile in
references/go-example.md for a worked example.
Best practices:
- Use multi-stage builds to keep production images small
- Use distroless or minimal base images to reduce attack surface
- Run as non-root user
- Log to
stdoutandstderrfor Cloud Logging collection
A complete worked Node.js example is provided in assets/:
Dockerfile (non-root node user),
index.js (implements distinct /healthz and /readyz
endpoints), package.json, and
deployment.yaml (hardened Deployment plus
ClusterIP Service, probes wired to /healthz and /readyz).
For applications where writing a Dockerfile is not preferred, you can use Cloud Native Buildpacks to automatically detect the language and build a container image:
pack build <image> --builder gcr.io/buildpacks/builder:latest3. Image Management
Build and store the container image:
# Configure Docker for Artifact Registry
gcloud auth configure-docker <REGION>-docker.pkg.dev --quiet
# Build and push
docker build -t <REGION>-docker.pkg.dev/<PROJECT>/<REPO>/<IMAGE>:<TAG> .
docker push <REGION>-docker.pkg.dev/<PROJECT>/<REPO>/<IMAGE>:<TAG>Vulnerability scanning: Enable automatic scanning in Artifact Registry to detect issues in base images and dependencies.
# Check scan results
gcloud artifacts docker images describe \
<REGION>-docker.pkg.dev/<PROJECT>/<REPO>/<IMAGE>:<TAG> \
--show-package-vulnerability \
--quietShow full SKILL.md (248 more words)Show less
4. Manifest Generation
Generate Kubernetes manifests for the application. A baseline Deployment +
ClusterIP Service manifest (probes, resource requests/limits, 2 replicas) is in
references/go-example.md.
Checklist for manifests:
- Resource requests and limits set
- Liveness and readiness probes configured
- At least 2 replicas for production
- Service type appropriate (ClusterIP for internal, use Gateway API for external)
See assets/deployment.yaml for a hardened worked
example. A production-hardened pod spec must include ALL of: runAsNonRoot: true, readOnlyRootFilesystem: true, allowPrivilegeEscalation: false,
capabilities.drop: ["ALL"], seccompProfile: {type: RuntimeDefault},
automountServiceAccountToken: false (unless the pod needs the token — then say
why), resource requests, digest-pinned image, and a ClusterIP Service.
That checklist is the baseline for any pod spec produced here. For manifest work
beyond it — Gateway API routes, GCS FUSE and secret volume mounting, subPath
overlays, Spot VM targeting, or AI/inference serving specs — see
gke-manifest-generation.
5. Deploy
# MCP (preferred)
apply_k8s_manifest(parent="projects/<PROJECT>/locations/<REGION>/clusters/<CLUSTER>", yamlManifest="<manifest>")
# Verify
get_k8s_rollout_status(parent="...", resourceType="deployment", name="my-app")
get_k8s_resource(parent="...", resourceType="pod", labelSelector="app=my-app")kubectl fallback:
kubectl apply -f manifests/
kubectl rollout status deployment/my-app
kubectl get pods -l app=my-appGolden Path Onboarding Checklist
For every production application onboarding to GKE:
- Container Security: Non-root user (
runAsNonRoot: true), lockfile install, minimal/distroless base image. - Resource Requests: Explicit CPU and memory requests (mandatory for GKE Autopilot).
- Health Probes: Both liveness (
livenessProbe) and readiness (readinessProbe) probes configured. - Reliability & Availability: At least 2 replicas and a
PodDisruptionBudget(minAvailable: 1or2). - IAM & Workload Identity: Workload Identity
(
iam.gke.io/gcp-service-account) instead of static service account keys.
Next Steps
Once the application is running on GKE:
- Configure autoscaling — see the
gke-workload-scalingskill - Set up observability — see the
gke-observabilityskill - Harden security — see the
gke-workload-securityskill - Configure reliability (PDBs, topology spread) — see the
gke-reliabilityskill
© google, Apache-2.0. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Files
SKILL.md and 6 other files (references, assets) in skills/cloud/gke-app-onboarding of google/skills.
- SKILL.md
- assets/Dockerfile
- assets/deployment.yaml
- assets/index.js
- assets/package-lock.json
- assets/package.json
- references/go-example.md
Open the folder on GitHubat commit 5120a76
Compare with similar skills
Gke App Onboarding next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Gke App Onboarding this skillgoogle/skills | 21k | — | ~1.4k | Automated safety check: Pass | Apache-2.0 | |
| Senior DevOps Toolkitmaslennikov-ig/claude-code-orchestrator-kit | 260 | 6 repos | ~1.1k | Automated safety check: Notes | Custom licence | |
| LangBot Deployment Guidelangbot-app/LangBot | 18k | — | ~1.2k | Automated safety check: Notes | Apache-2.0 | |
| Devopsnicepkg/auto-company | 194 | 2 repos | ~814 | Automated safety check: Pass | MIT | |
| Debug Openshell ClusterNVIDIA/OpenShell | 16k | — | ~19k | Automated safety check: Notes | Apache-2.0 | |
| Deploymentmatrixorigin/memoria | 609 | — | ~1.6k | Automated safety check: Notes | Apache-2.0 |
Similar skills
LangBot Deployment Guide
langbot-app/LangBot
Deploys and configures a LangBot instance with Docker Compose or Kubernetes, covering config.yaml, the Box sandbox runtime, the plugin runtime and the global API key.
Devops
nicepkg/auto-company
Deploy to Cloudflare (Workers, R2, D1), Docker, GCP (Cloud Run, GKE), Kubernetes (kubectl, Helm).
- Official
Debug Openshell Cluster
NVIDIA/OpenShell
Debug why an OpenShell gateway deployment is unhealthy, unreachable, or unable to create sandboxes.
Deployment
matrixorigin/memoria
Deploy Memoria with Docker Compose or Kubernetes. An agent skill from matrixorigin/memoria.
Onboarding Validation
open-edge-platform/edge-ai-suites
Validate the get-started experience of Open Edge Platform (OEP) software components from the perspective of a first-time user.
More from google/skills
All 147 skills in this repo- Official
Cloud Trace Querying
google/skills
Query Cloud Trace spans, filter by latency thresholds or error status, correlate distributed traces with Cloud Logging, and diagnose latency bottlenecks across Google Cloud services.
- Official
Google Cloud PAM Helper
google/skills
Manages Google Cloud Privileged Access Manager entitlements and grants: create and edit entitlements, request temporary access, and approve or deny pending grants.
- Official
Agent Platform Alert Configuration
google/skills
Writes Terraform alerting policies for AI agents that emit OpenTelemetry metrics, covering reliability, cost, safety, security and quality signals on Google Cloud.
- Official
Model Garden Deployment
google/skills
Deploys open models or custom weights from Model Garden to Agent Platform endpoints, checks deployment status and cleans up endpoints, confirming before any change.
- Official
Agent Platform Skill Registry
google/skills
Searches, manages and scaffolds skills in the Gemini Enterprise Agent Platform Skill Registry using bundled Python scripts and Google Cloud credentials.
- Official
GCP Application Design Center Deploy
google/skills
Designs GCP infrastructure as local Terraform, validates and scans it against best practices, then imports it to Application Design Center for deployment and troubleshooting.
Related
Works with
Categories
Questions about Gke App Onboarding
What does Gke App Onboarding do?
Manages GKE application onboarding, covering containerization, deployment manifests, and migration. Gke App Onboarding is an agent skill from google/skills, published by the product's own GitHub organization. Manages GKE application onboarding, covering containerization, deployment manifests, and migration.
When should I use Gke App Onboarding?
Gke App Onboarding fits situations like: deploying an application to GKE for the first time; containerizing an app for GKE; general GKE cluster administration; upgrades (use gke-basics.
How do I install Gke App Onboarding in Claude Code?
Run `npx skills add google/skills --skill gke-app-onboarding -a claude-code`. Or copy the skill folder (skills/cloud/gke-app-onboarding in google/skills) into .claude/skills/gke-app-onboarding in your project. Claude Code loads it when a task matches its description.
How do I install Gke App Onboarding in Codex?
Run `npx skills add google/skills --skill gke-app-onboarding -a codex`. Or copy the skill folder (skills/cloud/gke-app-onboarding in google/skills) into .agents/skills/gke-app-onboarding in your project. Codex loads it when a task matches its description.
Can I use Gke App Onboarding in Cursor, Gemini CLI or GitHub Copilot?
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add google/skills --skill gke-app-onboarding -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/gke-app-onboarding, .gemini/skills/gke-app-onboarding, .github/skills/gke-app-onboarding and .opencode/skills/gke-app-onboarding in your project.
What does Gke App Onboarding need to run?
Going by SKILL.md and its folder, Gke App Onboarding needs JavaScript for the scripts in its folder and the command-line tools its instructions call (kubectl, gcloud and docker). Our summary lists: Node.js; Docker.
Does Gke App Onboarding access the network?
SKILL.md names 1 domain. As links in the text: buildpacks.io. This is read from the text; nothing was executed.
Is Gke App Onboarding safe to install?
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
What licence does Gke App Onboarding use?
Gke App Onboarding is published under the Apache-2.0 licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
How many tokens does Gke App Onboarding use?
About 1.4k tokens (SKILL.md is roughly 5.6k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 512 tokens, read only when the agent opens those files.
What are the alternatives to Gke App Onboarding?
Skills that share tags, products or a category with Gke App Onboarding: Senior DevOps Toolkit (maslennikov-ig/claude-code-orchestrator-kit, 260 stars), LangBot Deployment Guide (langbot-app/LangBot, 18k stars), Devops (nicepkg/auto-company, 194 stars) and Debug Openshell Cluster (NVIDIA/OpenShell, 16k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
Who maintains Gke App Onboarding?
google (a GitHub organization, an official publisher) maintains it in google/skills, which has 21,069 GitHub stars. The repository holds 147 skills in this directory. The repository was last updated on October 9, 2026.
Source: google/skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.