domains / families / agent-tooling / agent-platform-troubleshooting

agent-platform-troubleshooting

separate

Troubleshoots Google Cloud Gemini Enterprise Agent Platform issues (Agent Gateway, Registry, Identity, Policies, Model Armor, Identity-Aware Proxy (IAP)). Use when agent requests fail with 403 (especially unauthorized egress), Agent Runtime queries return 500, or gateway/IAP logs show permission errors. Don't use for general Google Cloud Identity and Access Management (IAM) debugging or networking issues unrelated to the Agent Platform stack.

When to use

• Agent → external API requests failing with 403, especially `Egress request
• ReasoningEngine / Agent Runtime queries returning `500 Internal Server
• Agent Runtime logs showing authz errors or container crashes
• Gateway logs showing `PERMISSION_DENIED` for Model Armor backend callouts
• Newly-registered endpoints / MCP servers / agents that "should work" but
• Suspected IAP / IAM / IAM-principal-set issues for agent identities
• Authz extension or authz policy debugging
• Gateway routing / monitoring confusion

When not to use

• General Google Cloud Identity and Access Management (IAM) debugging
• Networking issues unrelated to the Agent Platform stack
• Generic GCP IAM or GCS access issues
• Custom Python or bash scripts for resource discovery

Skill page

Source