DevOps & Cloud

Deployment, cloud, containers, CI/CD, monitoring, and infrastructure

skills in category: 19,591
pages available: 817

Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.

Open in full browser

Browse devops & cloud skills

Showing 14,641–14,664 of 19,591 skills

Gcp Live Kms Key Destruction GuardAGate Cloud KMS key version destruction and key ring deletion against a complete CMEK dependency audit. All Cloud SQL, GCS, BigQuery, Compute Engine disk, and Secret Manager resources encrypted by the key version become permanently inaccessible once destruction completes — this guard ensures no key version is destroyed without enumerating every dependent resource and obtaining explicit operator approval.devopsgosqlVotes: 0GitHub stars: 23
Gcp Live Iam Policy Change GuardAGate IAM binding mutations, org policy changes, and Service Account key creation against the GCP resource hierarchy. IAM bindings at org level propagate to all folders and projects — this guard enforces blast-radius assessment, audit-trail confirmation, and explicit authority approval before any policy mutation is executed.devopsgokubernetesVotes: 0GitHub stars: 23
Gcp Live Gke Rollout GuardAGate GKE deployment mutations, node pool upgrades, and cluster control-plane version changes against rollback posture and PDB audit before any production change. Prevents irreversible node pool upgrades from proceeding without PodDisruptionBudget verification, surge settings review, and explicit operator approval.devopsgonodeVotes: 0GitHub stars: 23
Gcp Live Cost Budget Action GuardAGate Cloud Billing budget threshold changes, committed-use discount (CUD) purchases, and quota increase requests with explicit financial-authority approval. CUD contracts are 1-3 year financial commitments that cannot be cancelled — this guard ensures every billing action is backed by spend-impact assessment, budget inventory review, and confirmed financial authority before execution.devopsgoawsVotes: 0GitHub stars: 23
Gcp Live Cloud Run Traffic Migration GuardAGate Cloud Run traffic percentage migrations, min-instances changes, and revision deletions against revision health verification and rollback posture assessment. Migrating 100% traffic to a broken revision causes complete service unavailability with no automatic rollback — this guard enforces health checks, gradual canary splits, and explicit approval before any production traffic change is executed.devopsgogcpVotes: 0GitHub stars: 23
Gcp Live Bigquery Dataset Deletion GuardAGate BigQuery dataset deletion, table truncation, and authorized view changes against a full downstream dependency audit and export confirmation. Dataset deletion is immediate and permanent with no recycle bin — this guard ensures no dataset is deleted without enumerating all tables, scheduled queries, Data Transfer jobs, Looker connections, and Dataflow pipelines that depend on it.devopsgosqlVotes: 0GitHub stars: 23
Skills DirectorySkills Directory 3 slots · $399/mo · one ad per page · sponsors can never buy grades.See placements
Gcp Landing Zone ArchitectADesign and review GCP landing zone foundations including organization setup, folder hierarchy, org policy baseline, Shared VPC, billing account structure, Security Command Center, and audit logging.devopsgonodeVotes: 0GitHub stars: 23
Gcp Iam Least Privilege ReviewAAudit GCP IAM bindings across the resource hierarchy (org/folder/project), identify overprivileged Service Accounts, review Workload Identity Federation configurations, evaluate org policy conditions, and recommend least-privilege remediation. Prefer gcp-secret-kms-lifecycle-steward for KMS/Secret Manager lifecycle design and gcp-vpc-service-controls-architect for perimeter access policy posture unless the request is primarily IAM binding surgery.devopsgogcpVotes: 0GitHub stars: 23
Gcp Iac Change Safety ReviewAReview Terraform and Deployment Manager changes targeting GCP — blast radius analysis, destroy-operation detection, cross-project impact, state file conflicts, org policy drift, and rollback plan completeness.devopsgogcpVotes: 0GitHub stars: 23
Gcp Gke Platform OperatorAOperate GKE clusters (Standard and Autopilot), manage node pools, configure Workload Identity, enforce Binary Authorization, plan node pool upgrades, and review cluster security posture.devopsrustgoVotes: 0GitHub stars: 23
Gcp Firebase DeveloperABuild, configure, and operate Firebase-powered web and mobile applications — covering Firestore, Firebase Auth, Firebase Hosting, Cloud Functions for Firebase, Firebase Storage, App Check, Firebase Remote Config, and Firebase Analytics. Use when building mobile/web apps with Firebase, setting up authentication flows, designing Firestore data models, deploying Firebase Hosting, or configuring Firebase security rules.devopsgojavaVotes: 0GitHub stars: 23
Gcp Data Pipeline EngineerADesign and troubleshoot data pipelines using Dataflow (Apache Beam), Pub/Sub messaging, Dataproc (Spark/Hadoop), Cloud Composer (Apache Airflow), and Dataplex data governance.devopsgogcpVotes: 0GitHub stars: 23
Gcp Daily Operations Briefing CoordinatorACoordinate the daily GCP operations standup — cost delta from previous day, quota warning review, failed deployment detection, Security Command Center finding triage, SLO burn rate alert review, and action item assignment.devopsgogcpVotes: 0GitHub stars: 23
Gcp Cost Anomaly Watch CoordinatorADetect and coordinate response to GCP cost anomalies — BigQuery on-demand query cost spikes ($5/TB scanned), Cloud Run scaling runaway, unattached Persistent Disks, idle GCE instances, budget alert → notification channel → remediation playbook.devopsgoreactVotes: 0GitHub stars: 23
Gcp Cloudbuild Deploy Cicd OperatorABuild and operate CI/CD pipelines using Cloud Build, Cloud Deploy delivery pipelines, Artifact Registry, SLSA provenance generation, and release gating with approval workflows.devopspythongoVotes: 0GitHub stars: 23
Gcp Cloud Run Functions OperatorADeploy and operate Cloud Run services, Cloud Functions gen2, Eventarc triggers, traffic splitting for progressive delivery, and cold-start optimization strategies.devopsgosqlVotes: 0GitHub stars: 23
Gcp Cloud Auth AdvisorAAdvise on Google Cloud authentication and authorization patterns — covering Application Default Credentials (ADC), service account best practices, Workload Identity Federation (for GKE pods and external workloads), human user auth (gcloud, IAP, Identity Platform), service-to-service auth (OIDC ID tokens, short-lived credentials), and anti-patterns like service account key downloads. Use when designing auth flows, debugging GCP auth failures, implementing least-privilege SA setup, or migrating...devopspythongoVotes: 0GitHub stars: 23
Gcp Certificate Manager Issuer ReviewAReview GCP Certificate Manager and classic Google-managed TLS certificates — certificate map configuration, DNS authorization, CAA record validation, certificate rotation automation, wildcard vs SAN design, and expiry monitoring.devopsrustgoVotes: 0GitHub stars: 23
Gcp Bigquery Cost Performance AnalystAAnalyze BigQuery slot reservation sizing, BI Engine acceleration, query cost estimation, dataset governance (expiration, access controls), and partitioning/clustering optimization to reduce on-demand scan costs.devopsgosqlVotes: 0GitHub stars: 23
Gcp Apigee Api Platform OperatorADesign and operate Apigee X API proxies — rate limiting, OAuth/JWT security policies, quota plans, developer portal setup, and API product management.devopsgogcpVotes: 0GitHub stars: 23
Gcp Anthos Multicloud ArchitectADesign and operate Anthos / GKE Enterprise fleet management, Config Management (GitOps with Policy Controller), multi-cloud Kubernetes across GCP, AWS, and Azure.devopsrustgoVotes: 0GitHub stars: 23
Gcp Alloydb Cloudsql DbaAOperate AlloyDB clusters and Cloud SQL instances — HA configuration, read replicas, connection pooling, maintenance windows, backup strategy, and performance diagnostics.devopsgosqlVotes: 0GitHub stars: 23
Vue State Store Security ReviewAStatically review Pinia and legacy Vuex state stores for sensitive data persisted to localStorage/sessionStorage without scoping, untrusted server-payload hydration (window.__pinia/__INITIAL_STATE__) with un-escaped state serialization, SSR store-singleton cross-request pollution, store plugins/$subscribe/$onAction acting on untrusted payloads, client-held role flags used as an authorization source of truth, and devtools state exposure in production builds.devopsrustgoVotes: 0GitHub stars: 23
Vue Ssr Security ReviewAStatically review Vue 3 SSR entry points and templates for cross-request state pollution (module-scope reactive state, non-per-request app/store creation) and injection via unsanitized v-html or unvalidated dynamic href/src bindings, grounded in Vue's own SSR and security-best-practices guidance.devopsjavascriptgoVotes: 0GitHub stars: 23