skills.rest
alon3153
alon3153COMMUNITY
Explore all skills by this author →
GitHub

gke-service-networking

Configures GKE Gateway API, Ingress, Cloud Armor, NEGs, and Private Service Connect networking.

Updated May 11, 2026
Search Tags:#kubernetes#load balancing#gke#ingress#cloud armor#gateway api#private service connect
One-click install
npx skills add https://github.com/alon3153/upe-social-publisher --skill gke-service-networking-alon3153
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: gke-service-networking
Source: https://github.com/alon3153/upe-social-publisher/tree/main/.agents/skills/gke-service-networking
Command: npx skills add https://github.com/alon3153/upe-social-publisher --skill gke-service-networking-alon3153

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes assets (resource) components.

What problem does it solve? Exposing applications running on Google Kubernetes Engine to the internet or internal networks requires correctly wiring together load balancers, TLS certificates, WAF policies, and private connectivity, which involves many GKE-specific annotations and resources that are easy to misconfigure. ## Core Features & Use Cases - Gateway API and Ingress Templates: Deployable manifest templates for external Gateways, HTTPRoutes with weighted traffic splitting for canary rollouts, and standard GCE Ingress. - Security and TLS: Workflows for attaching Cloud Armor security policies via BackendConfig and provisioning Google-managed SSL certificates through ManagedCertificate or Certificate Manager certmaps. - Advanced Load Balancing and Private Connectivity: Guidance on Container-Native Load Balancing with NEGs, Private Service Connect ServiceAttachments, and Topology Aware Routing. - Use Case: You need to expose a new service on GKE with HTTPS, path-based routing, a 90/10 canary split, and a WAF policy blocking abusive IP ranges; this Skill provides the exact manifests and gcloud commands to apply. ## Quick Start Ask the assistant to configure a GKE Gateway with an HTTPRoute and a Google-managed SSL certificate for your service using this skill.

Frequently Asked Questions about gke-service-networking

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure Gateway API on GKE?▼

Apply a Gateway manifest using the gke-l7-global-external-managed GatewayClass with an HTTP listener, then attach an HTTPRoute via parentRefs that routes path prefixes to your Service backendRefs. Gateway API is enabled by default on GKE 1.26+ clusters.

How do I set up canary deployments with GKE HTTPRoute?▼

Define multiple backendRefs in the HTTPRoute rule with weight fields, such as 90 for the stable service and 10 for the canary. The Gateway controller splits traffic across the backend Services according to those weights.

When do I need to add the NEG annotation manually on GKE?▼

Add cloud.google.com/neg manually for standalone NEGs you manage yourself, or for external Ingress on clusters using Shared VPC, GKE Network Policy, or non-VPC-native networking. Internal Ingress and qualifying external Ingress clusters get the annotation automatically.

Why is my GKE ManagedCertificate stuck in Provisioning?▼

The certificate stays in Provisioning until the domain's A or AAAA records point at the load balancer IP address. After DNS is correct, provisioning can still take 15 to 60 minutes to complete.

What are the requirements for Private Service Connect on GKE?▼

The backing Service must be an internal passthrough Network Load Balancer, meaning type LoadBalancer with the networking.gke.io/load-balancer-type Internal annotation. You then create a ServiceAttachment referencing that Service, a PSC NAT subnet, and a connection preference.

Why does my regional GKE Gateway stay unprogrammed?▼

Regional Gateway classes like gke-l7-regional-external-managed and gke-l7-rilb require a proxy-only subnet with purpose REGIONAL_MANAGED_PROXY in the region. Without that subnet, the Gateway cannot be programmed.

Related Skills

Explore More Software Engineering Skills→
wangx7wangx7

gke-networking

Configure private VPC-native GKE clusters with Dataplane V2 and Gateway API.

Community
Intermediate
manutejmanutej
1

api-gateway-patterns

Implement Kong API gateway patterns for routing, authentication, and rate limiting.

Community
Advanced
anyscaleanyscale
2

deploy-gcp-gke

Deploy the Anyscale platform on a new GKE cluster in GCP.

Official
Advanced
dojoenginedojoengine
1

rust-router

Route Rust questions to relevant knowledge sources with layered L1/L2/L3 skills.

Official
Advanced