GCP with AI
Operate and secure Google Cloud with AI — IAM, VPC and firewall rules, GKE, Cloud Run, Cloud Functions, Terraform, and billing and cost optimization.
43 copy-paste prompts · 68 in-depth guides Jump to prompts Jump to guides
Prompts
- Advanced
Binary Authorization & Supply-Chain Security Review Prompt
Review a GKE/Cloud Run Binary Authorization policy for enforcement gaps, attestation coverage, break-glass misuse, and admission-blocking failures — so only trusted, verified images run in production.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Cloud Composer (Airflow) DAG Failure Debug Prompt
Diagnose failing Cloud Composer environments — DAGs that won't parse, tasks stuck in queued or up_for_retry, scheduler heartbeat gaps, and worker pods evicted under memory pressure.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Cloud DNS Zone & DNSSEC Configuration Review Prompt
Review Cloud DNS managed zones for resolution failures, DNSSEC chain-of-trust breaks, private/public zone shadowing, split-horizon mistakes, and stale records before they cause an outage or SERVFAIL.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Dataflow Pipeline Performance & Autoscaling Debug Prompt
Diagnose slow or stalled Dataflow jobs — pipelines that won't autoscale, workers stuck at high system lag, hot keys skewing throughput, and streaming backlogs that grow faster than they drain.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Eventarc Trigger Routing Debug Prompt
Diagnose Eventarc triggers that never fire — events not reaching Cloud Run/Functions, permission gaps on the trigger service account, wrong event filters, and audit-log events that were never enabled.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GKE Gateway API & Ingress Config Review Prompt
Review GKE Gateway API and Ingress configuration for routing gaps, unhealthy backends, missing health checks, TLS/cert issues, and misapplied HTTPRoute rules before external traffic hits a 404 or 502.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Memorystore for Redis Performance & Failover Review Prompt
Review a Memorystore for Redis instance for latency spikes, eviction under memory pressure, failover behavior, and connection exhaustion — before it becomes a cache stampede that takes the app down.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Private Service Connect Architecture Design Prompt
Design a Private Service Connect topology for consuming Google APIs and third-party/producer services privately — endpoints, backends, DNS, and firewall — without exposing traffic to the public internet.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Vertex AI Endpoint & GPU Scaling Debug Prompt
Diagnose Vertex AI online prediction problems — endpoints that won't autoscale, GPU quota blocks on deploy, cold-start latency, and 429/resource-exhausted errors under load — before they page the on-call.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GKE Autoscaling: Cluster Autoscaler & HPA Debug Prompt
Diagnose GKE scaling failures — pods stuck Pending while nodes don't scale up, HPA that won't add replicas, and node pools that scale down too aggressively or not at all.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GCP Hybrid Connectivity: Cloud VPN & Interconnect Debug Prompt
Troubleshoot hybrid connectivity to GCP — down HA VPN tunnels, Cloud Router BGP sessions that won't establish, missing or unadvertised routes, and asymmetric traffic between on-prem and a VPC.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GCP Terraform Review: IaC Security & Drift Prompt
Review Terraform for GCP before apply — catch over-broad IAM bindings, public buckets, open firewall rules, unpinned providers, and dangerous plan changes that would replace stateful resources.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GKE Cluster Upgrade Strategy & Release Channel Prompt
Plan a safe GKE control-plane and node upgrade — release channels, maintenance windows, surge settings, and workload disruption budgets — so version bumps don't break APIs or evict critical pods.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GCP Quota Increase & Capacity Planning Prompt
Turn a looming GCP quota wall into a defensible increase request and capacity plan — mapping the right quota metric, region, and limit to real growth so launches don't fail with RESOURCE_EXHAUSTED.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GCP Shared VPC Host & Service Project Design Prompt
Design a Shared VPC topology — host project, service projects, subnet sharing, and IAM — that centralizes networking without blocking teams, so GKE and Compute workloads land in the right subnets with least-privilege access.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GCP Cloud Logging Incident Root-Cause Analysis Prompt
Work backward from a production incident through Cloud Logging, Error Reporting, and audit logs to find the root cause and the change that triggered it — correlating across services by trace and time, not eyeballing one log stream.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GCP Cloud Monitoring Alert Policy & SLO Design Prompt
Design Cloud Monitoring alerting policies and SLOs that page on user-facing pain — not noisy threshold alerts — by choosing the right metric, condition, burn-rate windows, and notification routing.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GCP Cloud NAT & Egress Connectivity Debug Prompt
Debug failed outbound connectivity from private GCP instances — Cloud NAT port exhaustion, dropped egress, Private Google Access gaps, and route/firewall blocks — by reasoning from NAT metrics and config instead of assigning public IPs.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
Cloud Run Revision Rollout & Traffic-Split Failure Debug Prompt
Debug a Cloud Run deploy where the new revision won't go Ready, traffic won't shift, or a canary is serving errors — by reasoning from revision status, traffic config, and the readiness/health signals instead of redeploying blindly.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
Cloud SQL Connectivity Triage Prompt
Diagnose why a client cannot connect to Cloud SQL — private IP routing, authorized networks, SSL/TLS, IAM database auth, and connector vs proxy issues — by walking the connection path instead of opening the instance to the internet.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
Compute Engine Right-Sizing & Idle Reclamation Prompt
Right-size Compute Engine VMs and reclaim idle instances using Recommender machine-type suggestions, utilization metrics, and disk/IP waste — without breaking workloads that legitimately need the headroom.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GKE Autopilot Resource Right-Sizing & Cost Prompt
Right-size GKE Autopilot workloads by tuning pod requests, choosing the correct compute class, and removing the bin-packing waste that drives Autopilot bills — using actual usage metrics, not copied-in requests.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
GCP IAM Permission-Denied (403) Debug Prompt
Decode a specific GCP PERMISSION_DENIED / 403 error by tracing the exact missing permission back through the resource hierarchy, the calling principal, conditions, and deny policies — instead of guessing roles or granting Owner.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GCP Resource Hierarchy & Asset Inventory Audit Prompt
Audit the GCP org/folder/project hierarchy and Cloud Asset Inventory for orphaned projects, inconsistent labels, lingering default service accounts, and public exposure — to find drift and risk across the estate, not one project at a time.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GCP Secret Manager Access & Rotation Review Prompt
Review Secret Manager secrets for over-broad access, missing rotation, sprawling versions, and replication/CMEK gaps — so secrets follow least privilege and rotate without breaking the workloads that read them.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
Artifact Registry & Cloud Build Pipeline Hardening Prompt
Review a Cloud Build pipeline and Artifact Registry setup for least-privilege service accounts, image provenance, vulnerability scanning, and supply-chain safety instead of running builds as the default SA.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
BigQuery Cost & Slot Optimization Prompt
Cut BigQuery spend by reasoning from INFORMATION_SCHEMA job history — bytes scanned, slot contention, and partition/cluster gaps — instead of blindly buying reservations.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Cloud Armor WAF & Rate-Limit Policy Review Prompt
Harden a Cloud Armor security policy — WAF rules, rate limiting, and bot defense — by reasoning from rule order, preconfigured-rule sensitivity, and preview-mode evidence instead of pasting in a blanket deny.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
Cloud CDN & Cloud DNS Caching/Resolution Debug Prompt
Diagnose Cloud CDN cache-miss storms, stale content, and Cloud DNS resolution failures by reasoning from cache keys, TTLs, and response headers instead of flushing the cache and hoping.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Cloud KMS Key Management & Rotation Review Prompt
Review Cloud KMS key rings, rotation, IAM, and CMEK usage so encryption keys follow least privilege and rotate safely without breaking access to data encrypted under old key versions.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Cloud Spanner Schema & Hotspot Modeling Prompt
Design or review a Cloud Spanner schema for even key distribution, interleaving, and index choices so a globally distributed table doesn't hotspot or serialize on a monotonic key.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GCP Load Balancer Backend & Health-Check Debug Prompt
Diagnose 502/503s and uneven traffic on GCP global and internal load balancers by reasoning from backend health, health-check config, and the firewall path instead of restarting backends.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
Pub/Sub Delivery, Ordering & Dead-Letter Debug Prompt
Diagnose Pub/Sub message loss, duplicate delivery, ordering failures, and growing backlogs by reasoning from subscription metrics and config instead of guessing at ack deadlines.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
VPC Service Controls Perimeter Design Prompt
Design or debug a VPC Service Controls perimeter to stop data exfiltration from managed services like BigQuery and Cloud Storage, using dry-run mode and access levels so you don't lock out legitimate access.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
GCP Billing & Cost Optimization Review Prompt
Find real GCP savings — committed-use discounts, rightsizing, idle resources, and billing anomalies — by reasoning from billing export and Recommender data instead of cargo-culting reservations.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
GCP Cloud Logging & Monitoring MQL Query Builder Prompt
Turn a vague 'find me the errors' or 'alert when latency spikes' request into precise Log Explorer queries and Monitoring MQL/PromQL that return exactly the signal you need.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
Cloud Run & Cloud Functions Cold-Start & Failure Debug Prompt
Debug Cloud Run / Cloud Functions cold starts, container startup failures, timeouts, and 5xx errors using revision config, concurrency, and logs — not blind redeploys.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
Cloud SQL Performance & Connection Tuning Prompt
Diagnose Cloud SQL slowness and connection exhaustion — slow queries, max_connections limits, connector vs proxy choices, and flag tuning — using Insights and metrics, not blind instance upsizing.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
Cloud Storage Bucket Security & Lifecycle Review Prompt
Audit a Cloud Storage bucket for public exposure, IAM/ACL sprawl, and missing lifecycle/retention rules — closing security gaps while cutting storage cost with the right class transitions.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GKE Troubleshooting: Workload Identity & Networking Prompt
Diagnose GKE failures — pods that can't reach GCP APIs, Workload Identity token errors, Autopilot scheduling rejections, and networking that breaks between nodes and the control plane.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GCP IAM Least-Privilege Binding Review Prompt
Audit IAM bindings across a project or folder to strip over-broad primitive roles, scope service accounts, and add IAM Conditions — without breaking the workloads that actually need access.
- Claude
- ChatGPT
- Cursor
Open prompt - Advanced
GCP Org Policy & Security Command Center Triage Prompt
Triage Security Command Center findings and design Organization Policy constraints that prevent the misconfiguration class — turning a wall of findings into a prioritized, preventive fix plan.
- Claude
- ChatGPT
- Cursor
Open prompt - Intermediate
GCP VPC Firewall & Routing Connectivity Debug Prompt
Trace why one GCP resource can't reach another by walking firewall rules, routes, and priorities in order — instead of opening 0.0.0.0/0 in frustration.
- Claude
- ChatGPT
- Cursor
Open prompt
Guides
- · 9 min read
GCP Error Guide: 'iam.serviceAccounts.actAs' Denied Impersonation Errors
Fix the GCP iam.serviceAccounts.actAs permission denied error: diagnose missing Service Account User role, deploy-time impersonation, and Workload Identity binds.
Read guide - · 8 min read
GCP Error: 'denied: Permission artifactregistry.repositories.uploadArtifacts denied' — Cause, Fix, and Troubleshooting Guide
Fix Artifact Registry push 'denied: Permission artifactregistry.repositories.uploadArtifacts denied': grant writer role, configure Docker auth, and fix CI push.
Read guide - · 8 min read
GCP Error: 'The request was aborted because there was no available instance' — Cause, Fix, and Troubleshooting Guide
Fix Cloud Run 'The request was aborted because there was no available instance' (429/500): raise max instances, fix slow cold starts, and clear scaling limits.
Read guide - · 7 min read
GCP Error: 'Operation failed because another operation was already in progress' — Cause, Fix, and Troubleshooting Guide
Fix Cloud SQL 409 'Operation failed because another operation was already in progress': wait for the running operation, serialize changes, and retry safely.
Read guide - · 8 min read
GCP Error: 'The query requires an index' — Cause, Fix, and Troubleshooting Guide
Fix Firestore FAILED_PRECONDITION 'The query requires an index': create the composite index and deploy firestore.indexes.json to fix the query.
Read guide - · 7 min read
GCP Error: 'gke-gcloud-auth-plugin not found' — Cause, Fix, and Troubleshooting Guide
Fix GKE 'gke-gcloud-auth-plugin not found' / 'no Auth Provider found for name gcp': install the auth plugin and set USE_GKE_GCLOUD_AUTH_PLUGIN for kubectl.
Read guide - · 8 min read
GCP Error: '0/n nodes are available: Insufficient cpu' — Cause, Fix, and Troubleshooting Guide
Fix GKE FailedScheduling '0/n nodes are available: Insufficient cpu': right-size pod requests, scale the node pool, and unblock Pending pods on GKE.
Read guide - · 9 min read
GCP Error: 'Your cluster's nodes are unhealthy' — Cause, Fix, and Troubleshooting Guide
Fix GKE 'nodes are unhealthy' / NotReady: diagnose node registration failures, kubelet issues, disk pressure, and network/metadata problems on GKE node pools.
Read guide - · 8 min read
GCP Error: 'is forbidden: exceeded quota' (ResourceQuota) — Cause, Fix, and Troubleshooting Guide
Fix GKE 'Error from server (Forbidden): ... is forbidden: exceeded quota': read the namespace ResourceQuota, set pod requests/limits, and raise or free quota.
Read guide - · 8 min read
GCP Error: 'node(s) had untolerated taint' — Cause, Fix, and Troubleshooting Guide
Fix GKE FailedScheduling 'node(s) had untolerated taint': add matching tolerations/nodeSelectors, fix NoSchedule taints, and unblock Pending pods on GKE.
Read guide - · 8 min read
GCP Error: 'Request had insufficient authentication scopes' — Cause, Fix, and Troubleshooting Guide
Fix GCP 403 'Request had insufficient authentication scopes' (ACCESS_TOKEN_SCOPE_INSUFFICIENT): fix VM access scopes, cloud-platform scope, and ADC scopes.
Read guide - · 8 min read
GCP Error: 'INVALID_ARGUMENT' — Cause, Fix, and Troubleshooting Guide
Fix GCP 400 INVALID_ARGUMENT errors: decode the field-violation details, fix malformed resource names, bad regions/enums, and out-of-range values.
Read guide - · 8 min read
GCP Error: 'You must be logged in to the server (Unauthorized)' — Cause, Fix, and Troubleshooting Guide
Fix GKE kubectl 'You must be logged in to the server (Unauthorized)': refresh gke credentials, fix the auth plugin, expired tokens, and RBAC on GKE clusters.
Read guide - · 8 min read
GCP Error: 'Request is missing required authentication credential' — Cause, Fix, and Troubleshooting Guide
Fix GCP 401 'Request is missing required authentication credential' (UNAUTHENTICATED): supply ADC, an OAuth token, or a valid API key to the request.
Read guide - · 8 min read
GCP Error: 'Reauthentication required' — Cause, Fix, and Troubleshooting Guide
Fix the gcloud 'Reauthentication required' / 'Reauthentication failed' error: refresh credentials, handle Google session-control policies, and unblock CI jobs.
Read guide - · 8 min read
GCP Error: 'The resource is already being used by another resource' — Cause, Fix, and Troubleshooting Guide
Fix Compute Engine RESOURCE_IN_USE_BY_ANOTHER_RESOURCE: find and detach the dependent resource (disk, IP, subnet, network) before deleting, then retry.
Read guide - · 7 min read
GCP Error: 'RESOURCE_OPERATION_RATE_EXCEEDED' — Cause, Fix, and Troubleshooting Guide
Fix Compute Engine 'RESOURCE_OPERATION_RATE_EXCEEDED': slow down per-resource mutations, add exponential backoff, and batch API calls to stop throttling.
Read guide - · 8 min read
GCP Error: 'Permission secretmanager.versions.access denied' — Cause, Fix, and Troubleshooting Guide
Fix Secret Manager 403 'Permission secretmanager.versions.access denied': grant secretAccessor to the right identity, at the right scope, on the secret.
Read guide - · 9 min read
GCP Error Guide: 'The service is currently unavailable' — Fix 503 UNAVAILABLE
Fix GCP 503 'The service is currently unavailable' (UNAVAILABLE): tell transient backend blips from client causes, add retries with backoff, stop retry storms.
Read guide - · 8 min read
GCP Error Guide: 'Build timed out' on Cloud Build — Fix Timeout Failures
Fix Cloud Build 'Build timed out': tell a slow step from the global timeout, raise the right timeout, add caching and bigger machines, and stop hung steps.
Read guide - · 9 min read
GCP Error Guide: 'Memory limit exceeded' on Cloud Run — Fix Container OOM
Fix Cloud Run 'Memory limit exceeded' container OOM: size the limit to real usage, tune concurrency, cut in-memory buffering, and stop the 503 restart loop.
Read guide - · 9 min read
GCP Error Guide: 'The node was low on resource: ephemeral-storage' — Fix GKE DiskPressure Evictions
Fix GKE 'node was low on resource: ephemeral-storage' evictions: find what fills the node disk, cap logs and emptyDir, set requests, grow the boot disk.
Read guide - · 8 min read
GCP Error Guide: 'Quota IN_USE_ADDRESSES exceeded' — Fix External IP Limit
Fix GCP 'Quota IN_USE_ADDRESSES exceeded': release orphaned static IPs, reclaim unattached addresses, cut IP sprawl, and request the right regional quota.
Read guide - · 9 min read
GCP Error Guide: '504 Gateway Timeout' on Cloud Load Balancing — Fix Backend Timeout
Fix GCP Load Balancing 504 Gateway Timeout: tell a slow backend from a short backend-service timeout, tune timeouts and keepalives, stop long requests dying.
Read guide - · 8 min read
GCP Error Guide: 'Error 412: At least one of the pre-conditions you specified did not hold' — Fix Precondition Failed
Fix GCP 412 'precondition did not hold' on Cloud Storage: align generation, metageneration, and etag preconditions, handle concurrent writes and stale requests.
Read guide - · 8 min read
GCP Error Guide: 'VPC connector is not ready yet' — Fix Serverless VPC Access
Fix GCP 'Serverless VPC Access connector is not ready yet': clear the error state, fix the /28 subnet and firewall, and restore private egress.
Read guide - · 8 min read
GCP Error Guide: 'SignatureDoesNotMatch' on Cloud Storage — Fix Signed URL Errors
Fix Cloud Storage 'SignatureDoesNotMatch' on signed URLs: align the signing key, canonical headers, expiry, and clock so computed and provided signatures agree.
Read guide - · 9 min read
GCP Error Guide: 'Cannot evict pod as it would violate the pod's disruption budget' — Fix GKE Drain
Fix 'Cannot evict pod as it would violate the disruption budget' on GKE: diagnose blocking PodDisruptionBudgets, unready replicas, and stuck node drains during upgrades and maintenance.
Read guide - · 9 min read
GCP Error Guide: 'Dropped_sent_packets' Cloud NAT Port Exhaustion — Fix NAT Allocation Failed
Fix Cloud NAT port exhaustion in GCP: diagnose dropped egress packets and nat_allocation_failed, raise minimum ports per VM, enable dynamic port allocation, and add NAT IPs to restore outbound traffic.
Read guide - · 9 min read
GCP Error Guide: 'An IP range in the peer network overlaps' — Fix VPC Peering Overlap
Fix 'An IP range in the peer network overlaps' in GCP VPC Network Peering: find the conflicting CIDR, re-plan non-overlapping subnets, handle Cloud SQL PSA ranges, and re-establish peering.
Read guide - · 9 min read
GCP Error Guide: 'The billing account for the owning project is disabled' — Re-enable Billing
Fix 'The billing account for the owning project is disabled in state absent' on GCP: re-link a valid billing account, resolve closed or over-budget accounts, and check IAM.
Read guide - · 9 min read
GCP Error Guide: 'invalid_grant: Invalid JWT Signature' — Fix Service Account Auth
Fix 'invalid_grant: Invalid JWT Signature' on GCP: rotate or replace a stale service account key, correct clock skew, and repair the wrong or deleted signing key.
Read guide - · 9 min read
GCP Error Guide: 'could not find default credentials' on GKE — Fix Workload Identity
Fix 'could not find default credentials' on GKE Workload Identity: bind the KSA to a GSA, annotate the service account, enable the metadata server, and grant IAM.
Read guide - · 9 min read
GCP Error Guide: 'SERVICE_DISABLED — API has not been used in project before or it is disabled'
Fix the GCP SERVICE_DISABLED error when an API has not been enabled in your project. Diagnose, enable the service, and wait out propagation correctly.
Read guide - · 9 min read
GCP Error Guide: 'Quota exceeded: too many concurrent queries' BigQuery Concurrency Limits
Fix BigQuery 'Exceeded rate limits: too many concurrent queries for this project': diagnose interactive slots, reservations, and runaway jobs with read-only bq and gcloud.
Read guide - · 9 min read
GCP Error Guide: 'ImagePullBackOff — denied: Permission artifactregistry.repositories.downloadArtifacts denied' on GKE
Fix GKE ImagePullBackOff caused by a 403 Forbidden pulling from Artifact Registry. Diagnose the missing downloadArtifacts IAM permission and resolve it.
Read guide - · 9 min read
GCP Error Guide: 'IP_SPACE_EXHAUSTED' GKE Secondary Range Out of IPs
Fix GKE IP_SPACE_EXHAUSTED: diagnose why a pod or service secondary range ran out of free IPs, add ranges, and size VPC-native clusters so scaling never stalls.
Read guide - · 9 min read
GCP Error Guide: 'Operation denied by org policy: constraints/compute.vmExternalIpAccess violates constraint'
Fix the GCP org policy violation blocking external IPs on Compute Engine VMs. Diagnose the vmExternalIpAccess constraint and resolve it the right way.
Read guide - · 9 min read
GCP Error Guide: 'Quota CPUS exceeded. Limit: 24.0 in region us-central1' Regional vCPU Limit
Fix the Compute Engine CPUS quota exceeded error: find which instances consume regional vCPUs, request an increase, and prevent capacity stalls in us-central1.
Read guide - · 9 min read
GCP Error Guide: 'Service account does not exist' NOT_FOUND Unknown Service Account
Fix GCP 'Service account ... does not exist / NOT_FOUND: Unknown service account': diagnose typos, deleted SAs, stale unique IDs, and wrong-project refs with read-only gcloud.
Read guide - · 9 min read
GCP Error Guide: 'SslCertificate managed status FAILED_NOT_VISIBLE' Managed Cert Provisioning Failure
Fix GCP load balancer managed certs stuck at FAILED_NOT_VISIBLE: diagnose DNS A/AAAA records, forwarding rules, CAA records, and domain status with read-only gcloud.
Read guide - · 9 min read
GCP Error Guide: 'ZONE_RESOURCE_POOL_EXHAUSTED' Zone Out of Capacity
Fix ZONE_RESOURCE_POOL_EXHAUSTED on Compute Engine: understand why a zone has no capacity for your machine type, fail over to other zones, and avoid stuck scale-ups.
Read guide - · 11 min read
BigQuery Cost Optimization With AI: Slots and Scans
BigQuery bills balloon from full scans and slot contention you can't see. Here's how I use AI to read INFORMATION_SCHEMA, find the costly queries, and cut spend safely.
Read guide - · 10 min read
Debugging Cloud CDN and Cloud DNS With AI: Caching and Resolution
Cloud CDN cache misses and Cloud DNS resolution failures hide in headers and TTLs. Here's how I use AI to find the cause instead of flushing the cache and hoping.
Read guide - · 10 min read
Debugging GCP Load Balancers With AI: Backends and Health Checks
GCP load balancer 502s and 503s come from a request path you have to trace. Here's how I use AI to localize the failure and fix health checks without restarting backends.
Read guide - · 10 min read
Debugging Pub/Sub With AI: Delivery, Ordering, and Dead Letters
Pub/Sub duplicates, lost messages, and growing backlogs trace back to its delivery semantics. Here's how I use AI to match the symptom to the real cause and fix it.
Read guide - · 11 min read
Designing VPC Service Controls With AI: Perimeters and Dry-Run
VPC Service Controls stops data exfiltration and can lock out your own pipelines. Here's how I use AI to design perimeters and roll them out in dry-run mode first.
Read guide - · 9 min read
GCP Error Guide: 'Error 409 alreadyExists' Resource Conflict Errors
Fix the GCP googleapi Error 409 alreadyExists / conflict error: diagnose duplicate creates, retries on existing resources, name collisions, and ETag races.
Read guide - · 10 min read
GCP Error Guide: 'Container failed to start' Cloud Run Revision Errors
Fix the Cloud Run 'Container failed to start and listen on PORT' error: diagnose PORT binding, slow startup, failed health checks, crashes, and image config.
Read guide - · 9 min read
GCP Error Guide: 'DEADLINE_EXCEEDED' Request Timeout Errors
Fix GCP DEADLINE_EXCEEDED errors: diagnose slow backends, undersized deadlines, large payloads, network egress, and retry storms across gRPC and REST APIs.
Read guide - · 10 min read
GCP Error Guide: '502 Bad Gateway' Load Balancer Backend Unhealthy
Fix GCP load balancer 502 / backend unhealthy errors: diagnose failing health checks, firewall rules, wrong ports, backend timeouts, and NEG misconfiguration.
Read guide - · 10 min read
GCP Error Guide: 'PERMISSION_DENIED (403)' Caller Does Not Have Permission
Fix the GCP PERMISSION_DENIED (403) caller does not have permission error: diagnose missing IAM roles, wrong active account, disabled APIs, and org policy denials.
Read guide - · 9 min read
GCP Error Guide: 'RESOURCE_EXHAUSTED' Quota Exceeded (CPUS / IN_USE_ADDRESSES)
Fix GCP RESOURCE_EXHAUSTED quota exceeded errors: diagnose regional CPU, IN_USE_ADDRESSES, and rate quotas, find the limiting metric, and request increases.
Read guide - · 9 min read
GCP Error Guide: 'The resource was not found (404)' Not Found Errors
Fix GCP 'The resource ... was not found' 404 errors: diagnose wrong project, region/zone, typos, deleted resources, and propagation lag in gcloud and the API.
Read guide - · 9 min read
GCP Error Guide: 'storage.objects.* denied (403)' Cloud Storage Access Errors
Fix GCP storage.objects.get/create 403 errors on a bucket: diagnose missing IAM roles, uniform vs fine-grained access, wrong identity, and VPC-SC denials.
Read guide - · 11 min read
Hardening Cloud Armor With AI: WAF Rules and Rate Limits
Cloud Armor blocks attacks and sometimes your own users. Here's how I use AI to tune WAF sensitivity, order rules safely, and roll out rate limits in preview mode first.
Read guide - · 10 min read
Managing Cloud KMS With AI: Rotation, IAM, and CMEK
Cloud KMS mistakes strand data permanently. Here's how I use AI to tighten key IAM, rotate safely, and apply CMEK without locking myself out of encrypted data.
Read guide - · 11 min read
Modeling Cloud Spanner Schemas With AI: Hotspots and Interleaving
Cloud Spanner punishes sequential keys with write hotspots that cap your throughput. Here's how I use AI to design keys, interleaving, and indexes that actually scale.
Read guide - · 11 min read
Securing GCP CI/CD With AI: Artifact Registry and Cloud Build
Your Cloud Build pipeline holds the keys to production. Here's how I use AI to apply least privilege, scan images, and gate deploys without breaking the pipeline.
Read guide - · 10 min read
Debugging Cloud Run and Cloud Functions With AI
Serverless on GCP fails in ways logs barely explain: cold starts, container contract violations, IAM denials. Here's how I use AI to decode Cloud Run and Cloud Functions failures.
Read guide - · 10 min read
Debugging VPC Firewall and Routing on GCP With AI
When traffic vanishes inside a GCP VPC, the cause is buried in firewall priorities, route tables, and implied rules. Here's how I use AI to decode the path packets actually take.
Read guide - · 11 min read
GCP Cost Optimization With AI: CUDs and Rightsizing
GCP bills are a haystack of SKUs, idle resources, and missed commitments. Here's how I use AI to read billing exports, find waste, and decide between CUDs and rightsizing.
Read guide - · 11 min read
Least-Privilege GCP IAM With AI: Roles, Conditions, and Service Accounts
GCP IAM is a sprawl of predefined roles and primitive grants that nobody fully reads. Here's how I use AI to draft tight custom roles, IAM conditions, and service accounts.
Read guide - · 11 min read
Org Policy and Security Command Center Triage With AI
Security Command Center floods you with findings and Org Policy is a maze of constraints. Here's how I use AI to triage SCC findings and write GCP organization policies that hold.
Read guide - · 10 min read
Securing Cloud Storage Buckets With AI: Access, Encryption, and Audits
A misconfigured Cloud Storage bucket is the classic cloud breach. Here's how I use AI to audit GCS IAM, enforce uniform access, and lock down public exposure on GCP.
Read guide - · 11 min read
Troubleshooting GKE With AI: Workload Identity and Networking
GKE failures hide across Kubernetes, GCP IAM, and VPC layers at once. Here's how I use AI to untangle Workload Identity errors and pod networking on Google Kubernetes Engine.
Read guide - · 11 min read
Tuning Cloud SQL With AI: Slow Queries, Flags, and Connections
Cloud SQL hides its tuning levers behind flags, insights dashboards, and connection limits. Here's how I use AI to read query insights and tune Postgres and MySQL on GCP.
Read guide - · 10 min read
Writing Cloud Monitoring MQL and Log Explorer Queries With AI
MQL and the Log Explorer query language are powerful and genuinely hard to write from memory. Here's how I use AI to draft GCP monitoring and logging queries that actually run.
Read guide