Skip to content

GKE Multi-Tenancy Planner

Plan and configure safe shared use of one GKE cluster by several teams

Repository
google/skills
Stars
21,782
Licence
Apache-2.0
Files
2 files

What it does

When installed, the agent gets guidance for sharing one Google Kubernetes Engine (GKE) cluster among several teams or environments. It helps choose an isolation model (namespace, node pool, or cluster per team), and writes example Kubernetes manifests for namespaces, role-based access, resource quotas, default container limits, network policies, and cost labels. It also knows how to turn on GKE cost allocation.

Great for

  • Platform or DevOps engineers running a shared GKE cluster for several teams
  • Engineers designing namespace-based isolation and resource quotas
  • Teams that need cost breakdowns by namespace or label

Skip it if

  • Single-team or single-tenant clusters, which the skill itself says to avoid, since it is aimed at shared clusters
  • Hard security isolation or strict compliance needs: the skill says namespace-level separation is soft isolation and stronger models may be required
  • Running it unreviewed against a production cluster: it issues kubectl and gcloud commands that change live infrastructure

Try asking

  • “Design a namespace-per-team layout for three engineering teams sharing one GKE cluster”
  • “Write a ResourceQuota and LimitRange for the team-a namespace”
  • “Set up network policies so pods in my team namespace can only talk to each other and DNS”
  • “Turn on GKE cost allocation and label namespaces by cost center”
Step-by-step guide: how to use GKE Multi-Tenancy PlannerInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 2 original files, the Apache-2.0 licence and an attribution note.

    gke-multitenancy.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip gke-multitenancy.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip gke-multitenancy.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Review every generated manifest and command before applying it, especially RBAC bindings and network policies, since they affect live access.
  • Start with the golden-path recommendation of namespace-per-team and move to stronger isolation only if compliance requires it.
  • Read the attribution file the skill requires; the skill asks the agent to add usage-tracking metadata to gcloud and User-Agent headers.

What's inside

  • references/attribution.md
  • SKILL.md

Redistributed unmodified from google/skills under the Apache-2.0 licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.