Google Cloud Platform — 谷歌云平台管理

Name: Google Cloud Platform — 谷歌云平台管理
Rating: 1 (2 reviews)
Author: Pipenzo

Pipenzo

Google Cloud Platform — 谷歌云平台管理

v1.0.1

通过 gcloud、gsutil 和 firebase CLI 管理谷歌云平台资源，涵盖 Compute Engine VM、Cloud Run 服务、Firebase Hosting、Cloud Storage 和项目管理，支持部署、监控、日志和 SSH 访问。

2· 4,580·23 当前·24 累计

by @jortega0033 (Pipenzo)·MIT-0

云服务系统工具开发工具

下载技能包

License

MIT-0

最后更新

2026/2/26

安全扫描

VirusTotal

无害

查看报告

OpenClaw

安全

high confidence

技能指令与目的（通过 gcloud/firebase/gsutil CLI 管理 GCP）一致，逻辑清晰，但会安装 CLI 并要求 GCP 凭据，使用时应谨慎。

评估建议

["安装将修改 ~/.bashrc，备份该文件。","使用最小权限服务账户或短期凭据进行身份验证。","命令可启动/停止/删除资源和通过 SSH 访问 VM，审查命令和所需 IAM 角色以避免意外中断。","下载来自官方源，但技能注册条目没有主页和未知所有者，应视为第三方指令。","若希望代理自主操作，限制其 IAM 范围并考虑手动调用以避免意外更改。"]...

详细分析 ▾

✓ 用途与能力

名称和描述（GCP 管理）与提供的运行时指令一致，包括 gcloud、gsutil 和 firebase 的安装和使用示例，涵盖 Compute Engine、Cloud Run、Cloud Storage、日志、计费和 SSH。

ℹ 指令范围

SKILL.md 包含具体命令，仅限于安装 CLI、身份验证（gcloud auth login / firebase login）和运行 gcloud/gsutil/firebase 命令。它修改了用户 shell (.bashrc) 并要求代理/操作员运行交互式身份验证和 SSH 命令；这些对于声明的目的是预期的，但会创建和存储本地凭据和远程访问功能。

ℹ 安装机制

SKILL.md 中的安装步骤从 dl.google.com 下载 google-cloud-cli（官方 Google 主机）并从公共 npm 注册表指示 npm install -g firebase-tools。两者对于此技能都是预期的，但它们会写入文件到用户的主目录并修改 shell 启动文件。

ℹ 凭证需求

技能未声明环境变量，这是合理的，但其操作需要有效的 GCP 凭据（通过交互式身份验证或预存在的 ADC/服务账户密钥创建）。这些凭据根据 IAM 角色授予强大的权限 — 技能没有请求明确的最小权限指导，因此请谨慎使用限制的角色/服务账户。

ℹ 持久化与权限

技能不请求 always: true 且是用户可调用。然而，遵循指令将安装 CLI 并更新 ~/.bashrc（持久性更改）。这对于 CLI 工具是正常的，但这是一个具有持久效果的本地更改。

安全有层次，运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发，无需署名。

查看条款 ↗

运行时依赖

无特殊依赖

版本

latestv1.0.12026/1/30

移除个人项目示例

● 无害

安装命令点击复制

官方npx clawhub@latest install gcloud

镜像加速npx clawhub@latest install gcloud --registry https://cn.clawhub-mirror.com

技能文档

请见下方（由于字符限制，仅提供部分，完整内容请参考原始技能文档）

Manage GCP resources using gcloud, gsutil, and firebase CLIs.

Installation

gcloud CLI (one-time setup)

# Download and extract cd ~ && curl -O https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-cli-linux-x86_64.tar.gz tar -xzf google-cloud-cli-linux-x86_64.tar.gz # Install (adds to PATH via .bashrc) ./google-cloud-sdk/install.sh --quiet --path-update true # Reload shell or source source ~/.bashrc

# Authenticate gcloud auth login

Firebase CLI

npm install -g firebase-tools
firebase login

Quick Reference

Authentication & Config

# List authenticated accounts gcloud auth list # Switch active account gcloud config set account EMAIL # List projects gcloud projects list # Set default project gcloud config set project PROJECT_ID

# View current config gcloud config list

Compute Engine (VMs)

List Instances

# All instances across projects
gcloud compute instances list --project PROJECT_ID# With specific fields
gcloud compute instances list --project PROJECT_ID \
  --format="table(name,zone,status,networkInterfaces[0].accessConfigs[0].natIP)"

Start/Stop/Restart

gcloud compute instances start INSTANCE_NAME --zone ZONE --project PROJECT_ID
gcloud compute instances stop INSTANCE_NAME --zone ZONE --project PROJECT_ID
gcloud compute instances reset INSTANCE_NAME --zone ZONE --project PROJECT_ID

SSH Access

# Interactive SSH gcloud compute ssh INSTANCE_NAME --zone ZONE --project PROJECT_ID # Run command remotely gcloud compute ssh INSTANCE_NAME --zone ZONE --project PROJECT_ID --command "uptime"

# With tunneling (e.g., for local port forwarding) gcloud compute ssh INSTANCE_NAME --zone ZONE --project PROJECT_ID -- -L 8080:localhost:8080

View Logs

# Serial port output (boot logs) gcloud compute instances get-serial-port-output INSTANCE_NAME --zone ZONE --project PROJECT_ID

# Tail logs via SSH gcloud compute ssh INSTANCE_NAME --zone ZONE --project PROJECT_ID --command "journalctl -f"

Cloud Run

List Services

# List all services in a region gcloud run services list --region REGION --project PROJECT_ID

# All regions gcloud run services list --project PROJECT_ID

Deploy

# Deploy from source (builds container automatically) gcloud run deploy SERVICE_NAME \ --source . \ --region REGION \ --project PROJECT_ID \ --allow-unauthenticated

# Deploy existing container image gcloud run deploy SERVICE_NAME \ --image gcr.io/PROJECT_ID/IMAGE:TAG \ --region REGION \ --project PROJECT_ID

View Service Details

gcloud run services describe SERVICE_NAME --region REGION --project PROJECT_ID

View Logs

# Stream logs gcloud run services logs read SERVICE_NAME --region REGION --project PROJECT_ID --limit 50

# Or use Cloud Logging gcloud logging read "resource.type=cloud_run_revision AND resource.labels.service_name=SERVICE_NAME" \ --project PROJECT_ID --limit 20 --format="table(timestamp,textPayload)"

Update Environment Variables

gcloud run services update SERVICE_NAME \
  --region REGION \
  --project PROJECT_ID \
  --set-env-vars "KEY1=value1,KEY2=value2"

Traffic Management

# Route 100% traffic to latest gcloud run services update-traffic SERVICE_NAME --to-latest --region REGION --project PROJECT_ID

# Split traffic (canary) gcloud run services update-traffic SERVICE_NAME \ --to-revisions=REVISION1=90,REVISION2=10 \ --region REGION --project PROJECT_ID

Firebase Hosting

List Projects

firebase projects:list

Deploy

# Deploy everything (hosting + functions + rules) firebase deploy --project PROJECT_ID # Hosting only firebase deploy --only hosting --project PROJECT_ID

# Specific site (multi-site setup) firebase deploy --only hosting:SITE_NAME --project PROJECT_ID

Preview Channels

# Create preview channel firebase hosting:channel:deploy CHANNEL_NAME --project PROJECT_ID # List channels firebase hosting:channel:list --project PROJECT_ID

# Delete channel firebase hosting:channel:delete CHANNEL_NAME --project PROJECT_ID

Rollback

# List recent deploys firebase hosting:releases:list --project PROJECT_ID

# Rollback to specific version firebase hosting:rollback --project PROJECT_ID

Cloud Storage (gsutil)

# List buckets gsutil ls # List contents gsutil ls gs://BUCKET_NAME/ # Copy file gsutil cp LOCAL_FILE gs://BUCKET_NAME/path/ gsutil cp gs://BUCKET_NAME/path/file LOCAL_PATH # Sync directory gsutil -m rsync -r LOCAL_DIR gs://BUCKET_NAME/path/

# Make public gsutil iam ch allUsers:objectViewer gs://BUCKET_NAME

Logs & Monitoring

Cloud Logging

# Read recent logs gcloud logging read "resource.type=gce_instance" --project PROJECT_ID --limit 20 # Filter by severity gcloud logging read "severity>=ERROR" --project PROJECT_ID --limit 20

# Specific resource gcloud logging read "resource.type=cloud_run_revision AND resource.labels.service_name=my-service" \ --project PROJECT_ID --limit 20

Monitoring Metrics

# List available metrics gcloud monitoring metrics list --project PROJECT_ID | head -50

# Describe metric gcloud monitoring metrics-scopes describe projects/PROJECT_ID

Billing & Cost Monitoring

View Current Costs

# List billing accounts gcloud billing accounts list # Get billing account linked to project gcloud billing projects describe PROJECT_ID

# View cost breakdown (requires billing export to BigQuery or use console) # Quick estimate via APIs enabled: gcloud services list --enabled --project PROJECT_ID

Set Budget Alerts

# Create budget (via gcloud beta)
gcloud billing budgets create \
  --billing-account=BILLING_ACCOUNT_ID \
  --display-name="Monthly Budget" \
  --budget-amount=50EUR \
  --threshold-rule=percent=50 \
  --threshold-rule=percent=90 \
  --threshold-rule=percent=100
# List budgets
gcloud billing budgets list --billing-account=BILLING_ACCOUNT_ID# Describe budget
gcloud billing budgets describe BUDGET_ID --billing-account=BILLING_ACCOUNT_ID

Cost-Saving Tips

# Stop unused VMs (saves $$$) gcloud compute instances stop INSTANCE_NAME --zone ZONE --project PROJECT_ID # Schedule auto-start/stop (use Cloud Scheduler + Cloud Functions or cron)

# Check for idle resources gcloud recommender recommendations list \ --project=PROJECT_ID \ --location=global \ --recommender=google.compute.instance.IdleResourceRecommender

Secret Manager

Create & Manage Secrets

# Enable API gcloud services enable secretmanager.googleapis.com --project PROJECT_ID # Create a secret echo -n "my-secret-value" | gcloud secrets create SECRET_NAME \ --data-file=- \ --project PROJECT_ID

# Or from file gcloud secrets create SECRET_NAME --data-file=./secret.txt --project PROJECT_ID

Access Secrets

# Get latest version gcloud secrets versions access latest --secret=SECRET_NAME --project PROJECT_ID # Get specific version gcloud secrets versions access 1 --secret=SECRET_NAME --project PROJECT_ID # List all secrets gcloud secrets list --project PROJECT_ID

# List versions of a secret gcloud secrets versions list SECRET_NAME --project PROJECT_ID

Update Secrets

# Add new version echo -n "new-value" | gcloud secrets versions add SECRET_NAME --data-file=- --project PROJECT_ID # Disable old version gcloud secrets versions disable VERSION_ID --secret=SECRET_NAME --project PROJECT_ID

# Delete version (permanent!) gcloud secrets versions destroy VERSION_ID --secret=SECRET_NAME --project PROJECT_ID

Use in Cloud Run

# Deploy with secret as env var gcloud run deploy SERVICE_NAME \ --image IMAGE \ --region REGION \ --project PROJECT_ID \ --set-secrets="ENV_VAR_NAME=SECRET_NAME:latest"

# Mount as file gcloud run deploy SERVICE_NAME \ --image IMAGE \ --region REGION \ --project PROJECT_ID \ --set-secrets="/path/to/secret=SECRET_NAME:latest"

Artifact Registry (Container Images)

Setup

# Enable API gcloud services enable artifactregistry.googleapis.com --project PROJECT_ID

# Create Docker repository gcloud artifacts repositories create REPO_NAME \ --repository-format=docker \ --location=REGION \ --project PROJECT_ID \ --description="Docker images"

Configure Docker Auth

# Configure Docker to use gcloud credentials
gcloud auth configure-docker REGION-docker.pkg.dev

Build & Push Images

# Build with Cloud Build (no local Docker needed) gcloud builds submit --tag REGION-docker.pkg.dev/PROJECT_ID/REPO_NAME/IMAGE:TAG

# Or with local Docker docker build -t REGION-docker.pkg.dev/PROJECT_ID/REPO_NAME/IMAGE:TAG . docker push REGION-docker.pkg.dev/PROJECT_ID/REPO_NAME/IMAGE:TAG

List & Manage Images

# List images gcloud artifacts docker images list REGION-docker.pkg.dev/PROJECT_ID/REPO_NAME # List tags for an image gcloud artifacts docker tags list REGION-docker.pkg.dev/PROJECT_ID/REPO_NAME/IMAGE

# Delete image gcloud artifacts docker images delete REGION-docker.pkg.dev/PROJECT_ID/REPO_NAME/IMAGE:TAG

Cloud SQL (Databases)

Create Instance

# Enable API gcloud services enable sqladmin.googleapis.com --project PROJECT_ID # Create PostgreSQL instance gcloud sql instances create INSTANCE_NAME \ --database-version=POSTGRES_15 \ --tier=db-f1-micro \ --region=REGION \ --project PROJECT_ID

# Create MySQL instance gcloud sql instances create INSTANCE_NAME \ --database-version=MYSQL_8_0 \ --tier=db-f1-micro \ --region=REGION \ --project PROJECT_ID

Manage Databases & Users

# Create database gcloud sql databases create DB_NAME --instance=INSTANCE_NAME --project PROJECT_ID # List databases gcloud sql databases list --instance=INSTANCE_NAME --project PROJECT_ID # Create user gcloud sql users create USERNAME \ --instance=INSTANCE_NAME \ --password=PASSWORD \ --project PROJECT_ID

# List users gcloud sql users list --instance=INSTANCE_NAME --project PROJECT_ID

Connect

# Connect via Cloud SQL Proxy (recommended)
# First, download proxy: https://cloud.google.com/sql/docs/mysql/sql-proxy
# Direct connection (requires public IP & authorized networks)
gcloud sql connect INSTANCE_NAME --user=USERNAME --project PROJECT_ID# Get connection info
gcloud sql instances describe INSTANCE_NAME --project PROJECT_ID \
  --format="value(connectionName)"

Backups

# Create on-demand backup gcloud sql backups create --instance=INSTANCE_NAME --project PROJECT_ID # List backups gcloud sql backups list --instance=INSTANCE_NAME --project PROJECT_ID

# Restore from backup gcloud sql backups restore BACKUP_ID --restore-instance=INSTANCE_NAME --project PROJECT_ID

Connect from Cloud Run

# Deploy with Cloud SQL connection
gcloud run deploy SERVICE_NAME \
  --image IMAGE \
  --region REGION \
  --project PROJECT_ID \
  --add-cloudsql-instances=PROJECT_ID:REGION:INSTANCE_NAME \
  --set-env-vars="DB_HOST=/cloudsql/PROJECT_ID:REGION:INSTANCE_NAME"

Troubleshooting

"API not enabled"

# Enable an API
gcloud services enable run.googleapis.com --project PROJECT_ID
gcloud services enable compute.googleapis.com --project PROJECT_ID

"Permission denied"

# Check IAM roles
gcloud projects get-iam-policy PROJECT_ID --flatten="bindings[].members" \
  --format="table(bindings.role)" --filter="bindings.members:EMAIL"

"Not authenticated"

gcloud auth login
gcloud auth application-default login  # For ADC (used by libraries)

Refresh credentials

gcloud auth login --force

数据来源：ClawHub ↗ · 中文优化：龙虾技能库

OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制

了解定制服务

License

运行时依赖

版本

安装命令 点击复制

技能文档

Installation

gcloud CLI (one-time setup)

Firebase CLI

Quick Reference

Authentication & Config

Compute Engine (VMs)

List Instances

Start/Stop/Restart

SSH Access

View Logs

Cloud Run

List Services

Deploy

View Service Details

View Logs

Update Environment Variables

Traffic Management

Firebase Hosting

List Projects

Deploy

Preview Channels

Rollback

Cloud Storage (gsutil)

Logs & Monitoring

Cloud Logging

Monitoring Metrics

Billing & Cost Monitoring

View Current Costs

Set Budget Alerts

Cost-Saving Tips

Secret Manager

Create & Manage Secrets

Access Secrets

Update Secrets

Use in Cloud Run

Artifact Registry (Container Images)

Setup

Configure Docker Auth

Build & Push Images

List & Manage Images

Cloud SQL (Databases)

Create Instance

Manage Databases & Users

Connect

Backups

Connect from Cloud Run

Troubleshooting

"API not enabled"

"Permission denied"

"Not authenticated"

Refresh credentials

安装命令点击复制