PlugWiki

cloud-run-basics skill for Claude: deploy to Google Cloud Run

Teaches your agent to deploy and manage Google Cloud Run services, jobs and worker pools with gcloud. For developers shipping to Google Cloud.

Installs
18.1K
on skills.sh
Stars
21.8K
on GitHub
Files
8
besides SKILL.md
Updated
Nov 2026
last repo commit

cloud-run-basics makes your agent run gcloud commands to deploy a container image or your source code to Cloud Run, create and run jobs, and deploy worker pools. It also covers the roles you need, the one rule that deployed code must listen on 0.0.0.0 and the PORT variable, and what to check when a deploy fails.

It loads when you ask to deploy something to Cloud Run. It needs the gcloud CLI signed in to a project where you hold the Cloud Run Admin, Source Developer, Service Account User and Logs Viewer roles. Its commands carry a usage tag that names the skill, and it enables Google Cloud APIs for you.

Good for

  • Developers deploying a web app or API to Cloud Run
  • Teams running scheduled or batch jobs on Google Cloud
  • People who already have gcloud set up and a Google Cloud project

Install cloud-run-basics

Claude Code

  1. 1

    Copy this prompt.

    Install the cloud-run-basics skill in Claude Code. Run this command:
    
    npx skills add https://github.com/google/skills --skill cloud-run-basics
    
    Then check that it loaded and tell me how to use it.
  2. 2

    Paste it into Claude Code. It shows the change and asks before running it.

Requires Node.js.

From its listing on skills.sh. Source.

What's in the skill

When it loads

Manages Cloud Run services, jobs, and worker pools. Use when you need to deploy applications responding to HTTP requests (services), run event-triggered or scheduled tasks (jobs), or handle always-on pull-based background processing (worker pools).

Sections in SKILL.md

  1. Attribution
  2. Prerequisites
  3. Required roles
  4. Deploy a Cloud Run service
  5. Deploy a container image to Cloud Run
  6. Supported container images
  7. Deploy from source code
  8. Create and execute a Cloud Run job
  9. Deploy a worker pool
  10. Deploy a container image
  11. Supported container images
  12. Deploy a worker pool from source
  13. What to do if a deployment fails:
  14. Reference Directory

Key facts

Author
Google
License
Apache-2.0
Installs on skills.sh
18,091 (Nov 2, 2026)
Last commit
Nov 1, 2026
Skill version
1.0.1 (frontmatter)

What it includes

  • Tags each gcloud command with the skill name

    Before any gcloud, REST or MCP command the agent reads a reference file, then prefixes gcloud with CLOUDSDK_METRICS_REQUEST_ATTRIBUTION and adds a User-Agent suffix on HTTP calls. The reference says the tag carries no user data and can be switched off if you ask.

    Runs code · Usage attribution

  • Enable the Cloud Run and Cloud Build APIs and grant roles

    Runs gcloud services enable for run.googleapis.com and cloudbuild.googleapis.com, and shows an IAM binding that gives the Cloud Build service account the Cloud Run Builder role.

    Runs code · Prerequisites

  • gcloud run deploy with --image

    Deploys a container image from Artifact Registry or Docker Hub. The example command includes --allow-unauthenticated, which makes the service public.

    Try: “Deploy this container image to Cloud Run in us-central1.”

    Runs code · Deploy a service from an image

  • gcloud run deploy with --source .

    Builds from your source with buildpacks and Cloud Build, or from a Dockerfile. A Preview option deploys with --no-build and a runtime base image.

    Try: “Deploy this folder to Cloud Run.”

    Runs code · Deploy a service from source

  • gcloud run jobs create, deploy and execute

    Creates a job with options for tasks (up to 10,000), retries, task timeout and parallelism, then runs it, optionally waiting for it to finish.

    Runs code · Create and run a job

  • gcloud run worker-pools deploy

    Deploys an always-on pull-based workload from an image or from source.

    Runs code · Deploy a worker pool

  • Read IAM notes, fetch logs, switch build mode

    For permission errors it reads the IAM reference. For crashes it reads recent logs with gcloud logging read. For native dependency errors it switches from --no-build to --source.

    Runs code · Troubleshoot a failed deploy

  • Reference documents the agent can open

    Core concepts, CLI usage, client libraries, the Cloud Run MCP server (remote, with a local open source option), Terraform examples, IAM and security (roles, service identities, ingress and egress controls), and networking and cost tips.

    Read · Reference files

From the official docs

Permissions

High risk

What it can do

  • Read your data
  • Create and change things
  • Delete things
  • Read-only mode

Watch out for

  • It deploys and changes things in your cloud project

    The agent runs gcloud commands that enable APIs, add an IAM role binding, and deploy services, jobs and worker pools. Try it in a test project first and approve each command. github.com

  • The example deploy makes a service public

    The image deploy example includes --allow-unauthenticated. Tell the agent to omit it if the service should need sign-in. github.com

  • Commands use --quiet and skip prompts

    Most commands in the skill end in --quiet, so gcloud will not stop to ask for confirmation. Review what the agent is about to run before you approve it. github.com

  • Services run as the default service account unless you set one

    iam-security.md says Cloud Run uses the Compute Engine default service account when none is given, and that depending on your organization policy it may hold the Editor role on the project. It recommends a user-managed account with minimal permissions. Ask the agent to set one. github.com

  • Commands carry a usage tag

    The skill adds an attribution tag with the skill name to gcloud commands and HTTP calls. Ask the agent to remove it if you do not want it. github.com

  • Terraform example grants public access

    The Terraform example in iac-usage.md binds roles/run.invoker to allUsers, which makes the service public. Remove that binding for private services. github.com

Technical details
Talks toGoogle Cloud APIs through gcloud. Cloud Build and Artifact Registry or Docker Hub for image builds and pulls
Sign-in and keysUses whatever gcloud account is signed in on your machine.
Scopes
  • Cloud Run Admin (roles/run.admin)

  • Cloud Run Source Developer (roles/run.sourceDeveloper)

  • Service Account User (roles/iam.serviceAccountUser)

  • Logs Viewer (roles/logging.viewer)

Questions

What does the cloud-run-basics skill do?

It gives your agent the gcloud commands and rules to deploy and manage Cloud Run services, jobs and worker pools. The agent runs them in your terminal against your Google Cloud project.

How do I install it in Claude Code, the Claude app or Codex?

Use the install box above. Install it where your agent runs shell commands and has gcloud, such as Claude Code or Codex. The repo does not document a Claude app upload for this skill.

Does it need an API key?

It needs no key of its own. It needs gcloud signed in to a Google Cloud project where you have the Cloud Run Admin, Cloud Run Source Developer, Service Account User and Logs Viewer roles.

Is it safe to install?

It bundles no scripts, but the agent runs gcloud commands that change your cloud project. They enable APIs, deploy code and can create public services. Use a test project, read each command before approving it, and avoid broad roles you do not need.

Will it make my service public?

The example deploy command uses --allow-unauthenticated, which lets anyone call the service. Ask the agent to leave that flag out if the service should stay private.

What is the usage tag on its gcloud commands?

The skill tells the agent to prefix gcloud with an attribution variable that names the skill. The reference file says the tag identifies only the skill and its version, carries no user data, and is dropped if you ask to disable it.

Does it use the Cloud Run MCP server?

It does not set one up. One reference file describes the remote Cloud Run MCP server and the open source local one, and points to Google's setup guide. The skill's own deploy steps use gcloud.

Information

updated Nov 2, 2026

Repository
google/skills
Folder
skills/cloud/cloud-run-basics

google/skillsskills.sh

Sources

Docs, issue trackers and discussions this page is built from.

Show all 6
  1. cloud-run-basics SKILL.md · github.com
  2. attribution.md · github.com
  3. Cloud Run MCP usage reference · github.com
  4. iam-security.md · github.com
  5. iac-usage.md · github.com
  6. cli-usage.md · github.com

Updated Nov 2, 2026.