gcp-vpc

Generate Google Cloud VPC architectures with Terraform configurations.

1|Updated Mar 2, 2026
One-click install
npx skills add https://github.com/sitharaj88/claude-skills --skill gcp-vpc
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: gcp-vpc
Source: https://github.com/sitharaj88/claude-skills/tree/main/skills/gcp-vpc
Command: npx skills add https://github.com/sitharaj88/claude-skills --skill gcp-vpc

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the creation and configuration of robust and secure Virtual Private Cloud (VPC) networks, subnets, firewall rules, and connectivity options within Google Cloud Platform.

Core Features & Use Cases

  • VPC Network Creation: Sets up custom-mode VPCs for granular control.
  • Subnet Configuration: Defines public, private, and data subnets with optional secondary ranges for GKE.
  • Firewall Rule Management: Implements secure ingress and egress rules using tags, service accounts, and hierarchical policies.
  • Connectivity Options: Configures Cloud NAT, VPC peering, Shared VPC, VPNs, and Private Service Connect.
  • Use Case: When you need to establish a secure and scalable network foundation for your cloud applications, including multi-region deployments, isolated database networks, and secure access to Google APIs.

Quick Start

Use the gcp-vpc skill to generate a custom VPC network with public and private subnets in us-central1 and us-east1, including firewall rules for internal communication and health checks.

Frequently Asked Questions about gcp-vpc

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I create a custom-mode VPC with private subnets and Cloud NAT in Google Cloud?

To create a custom-mode VPC with private subnets and Cloud NAT, you define regional subnets with specified CIDR ranges and configure Cloud NAT for outbound internet access. This Skill generates the required gcloud CLI commands and Terraform configurations for secure, scalable network setups.

What is the best way to configure Shared VPC and VPC peering for multi-region GCP deployments?

The best way to configure Shared VPC and VPC peering for multi-region GCP deployments is to automate the setup using infrastructure as code. This Skill generates production-ready Terraform configurations and gcloud commands for cross-project resource sharing and multi-region connectivity.

Can I use Terraform to manage GCP firewall rules using network tags and service accounts?

Yes, you can use Terraform to manage GCP firewall rules using network tags and service accounts. This Skill outputs infrastructure as code that implements secure ingress and egress rules based on your specified identity and tag policies.

Does this approach support setting up secondary IP ranges for GKE clusters within a VPC?

Yes, this approach supports setting up secondary IP ranges for GKE clusters within a VPC. The configuration defines public, private, and data subnets with optional secondary ranges specifically designed to accommodate GKE networking requirements.

How do I establish secure access to Google APIs without exposing my VPC to the public internet?

To establish secure access to Google APIs without public internet exposure, you configure Private Service Connect within your VPC architecture. This Skill generates the necessary network endpoint configurations and routing rules to keep API traffic internal.

What are the limitations of using gcloud CLI commands versus Terraform for VPC infrastructure provisioning?

Using gcloud CLI commands for VPC provisioning lacks the declarative state management and drift detection capabilities inherent to Terraform. This Skill provides both gcloud commands for quick execution and Terraform configurations for repeatable, production-ready infrastructure as code.