awesome-cheatsheets/tools/gcp.md

GCLOUD SDK AND TOOLBELT CHEATSHEET

GCP BASICS

• Check Version and Settings: gcloud version, gcloud info, gcloud components list

• Init Profile: gcloud init This will ask you to open an OpenID URL

• List all zones: gcloud compute zones list

• Upgrade local SDK: gcloud components update, gcloud components update --version 219.0.1

BUCKET BASICS

• List all buckets and files: gsutil ls, gsutil ls -lh gs://

• Download file: gsutil cp gs:////package-1.1.tgz .

• Upload file: gsutil cp gs:////

• Cat file: gsutil cat gs:////

• Delete file: gsutil rm gs:///

• Move file: gsutil mv gs:////

• Copy folder: gsutil cp -r ./conf gs:///

• Show disk usage: gsutil du -h gs:////

• Create bucket: gsutil mb gs://

• Caculate file sha1sum: gsha1sum syslog-migration-10.0.2.tgz, shasum syslog-migration-10.0.2.tgz

• Gsutil help: gsutil help, gsutil help cp, gsutil help options

GCP PROJECT

• List projects : gcloud config list, gcloud config list project

• Show project info : gcloud compute project-info describe

• Switch project : gcloud config set project

GKE

• Display a list of credentialed accounts : gcloud auth list

• Set the active account : gcloud config set account

• Set kubectl context : gcloud container clusters get-credentials

• Change region : gcloud config set compute/region us-west

• Change zone : gcloud config set compute/zone us-west1-b

• List all container clusters : gcloud container clusters list

IAM

• Authenticate client : gcloud auth activate-service-account --key-file

• Display a list of credentialed accounts : gcloud auth list

• Set the active account : gcloud config set account

• Auth to GCP Container Registry : gcloud auth configure-docker

• Print token for active account : gcloud auth print-access-token, gcloud auth print-refresh-token

• Revoke previous generated credential : gcloud auth revoke

BUCKET SECURITY

• Make all files readable : gsutil -m acl set -R -a public-read gs:///

• Config auth : gsutil config -a

• Grant bucket access : gsutil iam ch user:denny@gmail.com:objectCreator,objectViewer gs://

• Remove bucket access : gsutil iam ch -d user:denny@gmail.com:objectCreator,objectViewer gs://

VM

• List all instances : gcloud compute instances list, gcloud compute instance-templates list

• Show instance info : gcloud compute instances describe "" --project "" --zone "us-west2-a"

• Stop an instance : gcloud compute instances stop instance-2

• Start an instance : gcloud compute instances start instance-2

• Create an instance : gcloud compute instances create vm1 --image image-1 --tags test --zone "" --machine-type f1-micro

• SSH to instance : gcloud compute ssh --project "" --zone "" ""

• Download files : gcloud compute copy-files example-instance:~/REMOTE-DIR ~/LOCAL-DIR --zone us-central1-a

• Upload files : gcloud compute copy-files /LOCAL-FILE-1 example-instance:/REMOTE-DIR --zone us-central1-a

DISKS & VOLUMES

• List all disks : gcloud compute disks list

• List all disk types : gcloud compute disk-types list

• List all snapshots : gcloud compute snapshots list

• Create snapshot : gcloud compute disks snapshot --snapshotname --zone $zone

NETWORK

• List all networks : gcloud compute networks list

• Detail of one network : gcloud compute networks describe --format json

• Create network : gcloud compute networks create

• Create subnet : gcloud compute networks subnets create subnet1 --network net1 --range 10.5.4.0/24

• Get a static ip : gcloud compute addresses create --region us-west2-a vpn-1-static-ip

• List all ip addresses : gcloud compute addresses list

• Describe ip address : gcloud compute addresses describe --region us-central1

• List all routes : gcloud compute routes list

DNS

• List of all record-sets in my zone : gcloud dns record-sets list --zone my_zone

• List first 10 DNS records : gcloud dns record-sets list --zone my_zone --limit=10

FIREWALL

• List all firewall rules : gcloud compute firewall-rules list

• List all forwarding rules : gcloud compute forwarding-rules list

• Describe one firewall rule : gcloud compute firewall-rules describe

• Create one firewall rule : gcloud compute firewall-rules create my-rule --network default --allow tcp:9200 tcp:3306

• Update one firewall rule : gcloud compute firewall-rules update default --network default --allow tcp:9200 tcp:9300

IMAGES & CONTAINERS

• List all images : gcloud compute images list

• List all container clusters : gcloud container clusters list

• Set kubectl context : gcloud container clusters get-credentials

RDS

• List all sql instances : gcloud sql instances list

SERVICES

• List my backend services : gcloud compute backend-services list

• List all my health check endpoints : gcloud compute http-health-checks list

• List all URL maps : gcloud compute url-maps list