Skip to content
Get packs

GKE Service Networking

Set up GKE load balancers, Gateway/Ingress routing, Cloud Armor, managed TLS certs and NEG-based traffic.

Source Download skill
Repository
google/skills
Stars
21,782
Licence
Apache-2.0
Files
10 files

What it does

Once installed, the agent knows how to expose applications running on Google Kubernetes Engine (GKE) to the internet or private networks. It can write and adjust ready-made configuration templates for Gateway API, standard Ingress, Cloud Armor firewall-style security rules, Google-managed SSL certificates and container-native load balancing, and it can help troubleshoot common load-balancer errors such as 502/5xx responses and failing health checks. The skill is a set of instructions and templates rather than a program; the agent still runs the commands on your behalf.

Great for

  • Platform or DevOps engineers setting up external or internal traffic routing for a GKE cluster
  • Developers who need canary traffic splitting or HTTPS certificates for a GKE-hosted app
  • Teams debugging Ingress or load balancer 502/5xx errors and health-check failures

Skip it if

  • Core cluster IP planning, Dataplane V2 network policies or node NAT egress, which the skill says to handle with the separate gke-networking skill
  • Non-GKE environments or users with no Kubernetes experience, since the templates assume cluster knowledge and can expose services publicly if misapplied
  • Production changes applied without review, because the agent may run gcloud and kubectl commands that create public load balancers and firewall rules

Try asking

  • “Create a Gateway and HTTPRoute that sends /api traffic to my backend service on GKE”
  • “Split traffic 90/10 between app-v1 and app-v2 for a canary rollout”
  • “Add a Cloud Armor policy that blocks the 203.0.113.0/24 range on my GKE service”
  • “Set up a Google-managed SSL certificate for example.com on my Ingress”
Step-by-step guide: how to use GKE Service NetworkingInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 10 original files, the Apache-2.0 licence and an attribution note.

    gke-service-networking.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip gke-service-networking.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip gke-service-networking.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Edit the '# Replace' placeholders in the assets/ templates and review them before running kubectl apply.
  • Ask the agent to show the gcloud and kubectl commands first, and confirm the project and cluster context so changes do not land in production by mistake.
  • Read the attribution reference the skill requires before running gcloud commands, and check that the Cloud Armor and certificate names match your environment.

What's inside

  • assets/backendconfig.yaml
  • assets/gateway-https.yaml
  • assets/gateway.yaml
  • assets/httproute-traffic-split.yaml
  • assets/httproute.yaml
  • assets/ingress.yaml
  • assets/managed-certificate.yaml
  • assets/service-attachment.yaml
  • references/attribution.md
  • SKILL.md

Redistributed unmodified from google/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.