cloud-monitoring-metric-selection
Retrieve, query, and identify relevant Cloud Monitoring metric descriptors on Google Cloud for a service or resource (such as Compute Engine, Spanner, BigQuery, Cloud Run, Cloud SQL, Pub/Sub, Cloud Storage, etc.). Use when asked to find, list, search, or discover GCP metric types, names, kind/value schemas, or descriptors.
- License 许可
- Apache-2.0
- 所属仓库
- google/skills
- 最近更新
- 2026-11-14
- Stars
- ★ 2.4w
- Forks
- 2.0k
01 前言 Front Matter
- name
- cloud-monitoring-metric-selection
- metadata
- { "version": "1.0.2", "category": "CloudObservabilityAndMonitoring" }
- description
- Retrieve, query, and identify relevant Cloud Monitoring metric descriptors on Google Cloud for a service or resource (such as Compute Engine, Spanner, BigQuery, Cloud Run, Cloud SQL, Pub/Sub, Cloud Storage, etc.). Use when asked to find, list, search, or discover GCP metric types, names, kind/value schemas, or descriptors.
02 资源文件 1
- 参考文档references/attribution.md1.9 KB
03 SKILL.md 正文
Metric Selection (Service Query & Local Keyword Filtering)
Use this skill to identify the most relevant Cloud Monitoring metric descriptors. It queries all metric descriptors for a target service from the API and filters them locally inside the agent's context using keyword matching.
Attribution
MUST READ: Before executing any gcloud, REST API, or MCP command, you
MUST read Usage Attribution. For commands executed
directly in the terminal (never in generated scripts, Terraform, or user code),
prefix gcloud with
CLOUDSDK_METRICS_REQUEST_ATTRIBUTION="agent-skills/1.0 (skill:cloud-monitoring-metric-selection)"
and append agent-skills/1.0 (skill:cloud-monitoring-metric-selection) to User-Agent headers.
CRITICAL RULES
- Always Query Live APIs: You MUST always retrieve the most up-to-date
metric descriptors dynamically by calling the
list_metric_descriptorsMCP tool. - Mandatory Project ID and Resource Parameter Clarification: BEFORE
calling any API tools (such as
list_metric_descriptors), you MUST ensure the GCP Project ID is provided in the prompt, URI, or environment context. If the Project ID cannot be resolved, you MUST ask the user to clarify or provide it BEFORE executing API queries. Do NOT run API queries against unconfirmed default or placeholder project names (such asmock-project,my-project-id,unused, orYOUR_PROJECT_ID). - Fallback Reporting: If API calls fail and fallback sources (such as public docs) are used, you MUST state the error, the fallback source, and the risks of non-live data (such as potential staleness, missing custom metrics, or schema mismatches).
Workflow
Step 1: Verify & Auto-Configure MCP
-
Check if any tool matching
list_metric_descriptors(such asgoogle-cloud-monitoring:list_metric_descriptors,mcp_google-cloud-monitoring_list_metric_descriptors, or a similar pattern) is available in your active toolset. -
Verify via Unique URL: To ensure you are calling the correct Cloud Monitoring tool, confirm that the underlying MCP server configuration points to:
https://monitoring.googleapis.com/mcp. -
If the tool is missing:
-
Locate the MCP configuration file for the user's environment. Check common paths:
~/.gemini/config/mcp_config.json~/.codeium/windsurf/mcp_config.jsoncline_mcp_settings.jsonclaude_desktop_config.json
-
Directly update/merge the configuration file with the following server configuration. CRITICAL: Merge the JSON object to preserve any existing MCP servers in
mcpServers. Do not overwrite the file."google-cloud-monitoring": { "url": "https://monitoring.googleapis.com/mcp", "authProviderType": "google_credentials", "enabledTools": [ "list_metric_descriptors" ] } -
Print a clear message notifying the user that the
google-cloud-monitoringMCP server has been configured, and request them to restart or start a new chat session to refresh tools. Stop calling further tools and end the turn.
-
Step 2: Analyze Request & Extract Keywords
-
Resolve Project ID and Identifiers: Check for the GCP Project ID and resource identifiers in the prompt, resource URIs, or environment context. According to the CRITICAL RULES above, do NOT use placeholder project names.
-
Identify Service Prefix: Map target GCP services to their standard prefix (such as
compute,spanner,bigquery,storage). -
Extract Metric Concepts: Extract metric keywords from user prompt (such as "CPU", "memory", "bytes scanned", "latency", "connections") and map to search substrings.
Example Query Analysis:
- User Prompt: "Check Cloud Storage bucket write throughput and request count"
- Resource URI:
//storage.googleapis.com/projects/my-project/buckets/my-bucket - Service Prefix:
storage(mapped tostorage.googleapis.com) - Metric Keywords:
write,throughput,request,count - Mapped Substrings:
write,throughput,request_count,count
Step 3: Query Metric Descriptors via list_metric_descriptors Tool
Query all metric descriptors for each identified service prefix using the
list_metric_descriptors MCP tool (using pageSize: 200). Because Cloud
Monitoring filters do not allow combining multiple metric.type restrictions
with OR, you must initiate a separate query for each identified service
prefix (either sequentially or in parallel).
If any response includes a nextPageToken, you MUST make consecutive follow-up
calls passing pageToken until all remaining descriptors for that prefix are
retrieved before filtering.
Filter Pattern Construction: Map the target service domain to its appropriate prefix style:
- Standard Google Cloud Services:
starts_with("<service_prefix>.googleapis.com/")(such asbigquery.googleapis.com/,redis.googleapis.com/). - Ops Agent (Guest OS):
starts_with("agent.googleapis.com/")(for guest OS memory/disk metrics). - Kubernetes / GKE Native:
starts_with("kubernetes.io/") - Istio Service Mesh:
starts_with("istio.io/") - Knative Serving / Autoscaler:
starts_with("knative.dev/") - Custom / External Metrics: Use
starts_with("custom.googleapis.com/")orstarts_with("external.googleapis.com/").
Example Tool Call Payload: If both Spanner and Compute Engine are targeted in the request, execute these two tool calls:
- Spanner query:
{
"name": "projects/my-project-id",
"filter": "metric.type = starts_with(\"spanner.googleapis.com/\")",
"pageSize": 200
}
- Compute Engine query:
{
"name": "projects/my-project-id",
"filter": "metric.type = starts_with(\"compute.googleapis.com/\")",
"pageSize": 200
}
Call the list_metric_descriptors tool with these payloads.
Step 4: Local Filtering & Fallback Protocol
Aggregate all descriptors returned from Step 3, and filter them locally inside your LLM context:
- Keyword Filtering: Filter the list by matching your target metric
keywords (such as "cpu", "latency") against the
type,displayName, anddescriptionfields of the descriptors. - Resource Alignment: Check if the metric contains labels matching the
target resource granularity (such as checking for a
databaselabel if targeting a database resource). Do not attempt to dynamically match resource type strings directly, as Cloud Monitoring resource mappings (like Spanner databases mapping tospanner_instance) can be counter-intuitive.
Troubleshooting & API Fallbacks
If any tool call fails, times out, or returns empty results, use these strategies:
- Case A: API Syntax Error: Examine the error message, correct the filter syntax, and retry.
- Case B: Timeout / Rate Limits: Retry the call once with a smaller page
size (such as
pageSize: 20). - Case C: Unrecoverable Failure / Empty List:
- Verify if the target service is enabled in the project.
- Search Google Cloud public documentation to verify standard metrics for the service.
Step 5: Output Selected Metrics
For each service domain, return only the 5-15 key metrics directly relevant to the user's intent.
You MUST report the selected metrics in clean Markdown tables, grouped by
service (that is, one table per service prefix). The table MUST include the
following columns: "Metric Type", "Display Name", "Description", "Metric Kind",
"Value Type", "Unit", and "Monitored Resource Types". Map the fields from the
Cloud Monitoring list_metric_descriptors tool call response objects
directly to the table columns:
- Metric Type: Map to the
typefield (for example,spanner.googleapis.com/instance/cpu/utilization). - Display Name: Map to the
displayNamefield. - Description: Map to the
descriptionfield. - Metric Kind: Map to the
metricKindfield (for example,GAUGE,DELTA,CUMULATIVE). - Value Type: Map to the
valueTypefield (for example,INT64,DOUBLE,DISTRIBUTION,BOOL). - Unit: Map to the
unitfield (for example,1,By,s,ms). - Monitored Resource Types: Map to the
monitoredResourceTypeslist field (for example,["spanner_instance"]).
Example Output Table:
| Metric Type | Display Name | Description | Metric Kind | Value Type | Unit | Monitored Resource Types |
|---|---|---|---|---|---|---|
spanner.googleapis.com/instance/cpu/utilization |
Instance CPU Utilization | Fraction of allocated CPU currently in use. | GAUGE | DOUBLE | 1 | ["spanner_instance"] |
Reference Documentation & Links
- Cloud Monitoring Metric List: GCP Metrics Documentation
- MetricDescriptor MCP Tool Reference: MCP Tools Reference: monitoring.googleapis.com
- Monitoring Filter Syntax Guide: Monitoring Filters
04 同仓库更多 Skills
sign-in-with-google-web
Implement, configure, and secure Sign In With Google (SiwG) using Google Identity Services (GIS / `https://accounts.google.com/gsi/client`) across web architectures. Use when creating Google sign-in buttons, implementing Google One Tap with FedCM, integrating GIS in React/Next.js/Angular/HTML, verifying ID tokens on backend runtimes (Python/Node.js/Go/Java), enforcing Google Workspace domain restrictions (`hd`), securing client-side ID tokens via WebCrypto nonces or encrypted IndexedDB, embedding in cross-origin iframes via the Intermediate Iframe API (`https://accounts.google.com/gsi/intermediate`), configuring Content Security Policy (CSP), COOP, and Permissions Policy (`identity-credentials-get`) headers, or handling sign-out and revocation. Don't use for legacy Google Sign-In (`gapi.auth2`), Google Cloud IAM service accounts, or Android/iOS native Credential Manager.
dpop-adoption
Implement and debug OAuth 2.0 DPoP (RFC 9449) refresh token sender-constraining for WebCrypto, Node.js ES6, and browser runtimes integrating with Google's OAuth platform. Use when configuring non-extractable asymmetric key pairs (P-256), generating DPoP Proof JWTs for authorization code exchange and token refresh, or handling 400 use_dpop_nonce challenge retry loops at oauth2.googleapis.com/token. Don't use for unconstrained OAuth 2.0 flows (where refresh tokens are not bound to a client key pair), or for Google Cloud IAM / service account authentication.
retrieving-developer-knowledge
Searches, retrieves, and synthesizes official Google developer documentation across Google Cloud, AI/Gemini, Android, Chrome, Web, Flutter, Go, Firebase, and other Google developer platforms. Integrates with the Developer Knowledge MCP server (search_documents, get_documents, answer_query) or the Developer Knowledge REST API fallback. Use when searching for gcloud CLI commands, API syntax, IAM permissions, official documentation, architectural comparisons, or product choice overviews. Don't use for local filesystem lookups or non-Google documentation.
migrate-to-rust
Clones, analyzes, plans, and migrates legacy codebases (C++, Fortran, Java, Python, C, Shell) from a GitHub URL or local directory to a modern, high-performance, deterministic, 100% Safe Rust architecture, tracking live telemetry across every task bucket, test failure/fix cycle, and Profile-Guided Optimization (PGO) stage, and producing a first-person AI storytelling report and interactive HTML infographic. Use when migrating a GitHub repository or local codebase to Rust, porting legacy C++, Fortran, Python, or Java workloads to memory-safe Rust, designing Struct-of-Arrays (SoA) or SIMD Rust architectures, or optimizing Rust ports with LLVM PGO. Don't use for unrelated non-Rust refactoring or single-line syntax questions.
finding-google-skills
Google platform decision and setup guidance, loaded on demand from Google's skill catalog. Use when a developer is choosing or setting up part of their stack, such as where to run a service, a database, storage, messaging, authentication, analytics, ads, or AI model serving, and a Google product is a reasonable candidate - whether or not a vendor is named - or when a request names a Google product or API. Brings in the matching Google skill so the answer can weigh Google options, their trade-offs, and when they are not the right fit. Skip when the stack is already settled on another provider and no Google product is named, or the task involves no platform choice.
workload-manager-basics
Use this skill to manage Google Cloud Workload Manager evaluations, rules, scanned resources, and validation results by using public client libraries and the REST API. Use when you need to inspect workload best-practice rules, create and run evaluations for Google Cloud general best practices, SAP, SQL Server, or custom organizational rules, review violations, export results to BigQuery, or automate Workload Manager through client libraries because no service-specific public CLI or MCP server is available. Don't use for general Google Compute Engine instance management, VPC configuration, or standard IAM auditing.