Giving Hermes Read-Only Access to GCP, AWS, and Kubernetes
A practical setup giving an AI agent read-only access to debug QA and production on GCP, AWS, GKE, and EKS without touching workloads or secrets.
Tag: gcp
Cloud Run as a Gemini proxy for an unsupported region
How I used Google Cloud Run as a small AI gateway so clients in an unsupported region can still call Gemini through a supported GCP region.
Identity-Aware GCS Access Instead of Hashed Secret URLs
Replacing hashed 'secret' URLs in Google Cloud Storage with IAM Conditions and domain-restricted access that verifies identity instead of hiding a path.
Zero-Downtime GKE Upgrades with PostgreSQL in the Cluster
A blue/green node pool runbook for upgrading GKE clusters with PostgreSQL running as a StatefulSet, without a maintenance window.
Zero-downtime GKE upgrades with PostgreSQL failover
Blue/green node pools plus a Kubegres replica promotion let you upgrade a GKE cluster, PostgreSQL included, without a maintenance window.
Migrating a GCP Classic Load Balancer to Global External
GCP lets you migrate a Classic Application Load Balancer to the Global External Load Balancer with a staged, four-state rollout that avoids downtime.
GKE's Two Health Check Systems and the Premature 502
GKE deployments can pass every readiness probe and still serve 502s, because Kubernetes probes and the Cloud Load Balancer run two separate health checks.
Enabling Gzip and Brotli Compression on Google Cloud CDN
Google Cloud CDN can compress responses with Brotli or Gzip automatically, covering the compressionMode setting, cache invalidation, and verifying it works.
How to Rotate GKE Cluster Credentials
The gcloud commands for checking certificate expiry, starting rotation, upgrading nodes to the new certificate, and completing GKE credential rotation.
Sending Pub/Sub Notifications to Slack With a Webhook
A small Node.js Cloud Function that decodes a Pub/Sub message, filters it by type, and forwards it to Slack through an incoming webhook.
GCP 502 Errors from GKE Readiness Probe Failures
A GKE 502 with 'failed_to_pick_backend' traced back to readiness probes failing on every pod at once, and the liveness probe and anti-affinity fixes that resolved it.