gke-productionize

GKE Productionize Skill

This skill acts as a high-level orchestrator for preparing a GKE cluster and its workloads for production readiness.

[!IMPORTANT] This is a meta-skill or orchestrator skill. You are expected to invoke and run many other specialized skills listed in this document as part of the overall productionization process. Do not attempt to implement all production readiness features directly within this skill; instead, use this skill to assess the environment and then delegate to the specific skills for each domain.

Scope

This skill is adaptable to:

• A single application (already on Kubernetes or not).
• A set of applications.
• A target cluster.

Workflow

1. Discovery Phase

Before making recommendations, discover the current state of the environment.

Cluster Discovery

Run these commands to understand the cluster setup:

• Check cluster details: gcloud container clusters describe {cluster_name} --location {location} --project {project}
• Check for Autopilot vs Standard: Look for autopilot: true in the describe output.
• Check release channel: Look for releaseChannel.

Workload Discovery

If a specific application is targeted, discover its configuration:

• Get deployment/statefulset details: kubectl get deployment {app_name} -n {namespace} -o yaml
• Check for dedicated namespace and labels: kubectl get namespace {namespace} -o yaml (Look for Pod Security Standards labels).
• Check for dedicated service account usage: kubectl get pods -n {namespace} -o custom-columns="NAME:.metadata.name,SERVICE_ACCOUNT:.spec.serviceAccountName"
• Check for resource requests and limits.
• Check for liveness, readiness, and startup probes.
• Check for HPA: kubectl get hpa -n {namespace}
• Check for PDB: kubectl get pdb -n {namespace}
• Check for NetworkPolicies: kubectl get networkpolicy -n {namespace}

2. Production Readiness Assessment

Before implementation, you MUST run the skills for each relevant specialized area listed below and incorporate its guidance into your assessment and plan. Failure to do so will result in a non-compliant production configuration.