gcp

Cheatsheet for gcp

Gcp

GCLOUD SDK AND TOOLBELT CHEATSHEET

GCP BASICS

  • Check Version and Settings: gcloud version, gcloud info, gcloud components list

  • Init Profile: gcloud init This will ask you to open an OpenID URL

  • List all zones: gcloud compute zones list

  • Upgrade local SDK: gcloud components update, gcloud components update --version 219.0.1

BUCKET BASICS

  • List all buckets and files: gsutil ls, gsutil ls -lh gs://

  • Download file: gsutil cp gs:////package-1.1.tgz .

  • Upload file: gsutil cp gs:////

  • Cat file: gsutil cat gs:////

  • Delete file: gsutil rm gs:///

  • Move file: gsutil mv gs:////

  • Copy folder: gsutil cp -r ./conf gs:///

  • Show disk usage: gsutil du -h gs:////

  • Create bucket: gsutil mb gs://

  • Caculate file sha1sum: gsha1sum syslog-migration-10.0.2.tgz, shasum syslog-migration-10.0.2.tgz

  • Gsutil help: gsutil help, gsutil help cp, gsutil help options

GCP PROJECT

  • List projects: gcloud config list, gcloud config list project

  • Show project info: gcloud compute project-info describe

  • Switch project: gcloud config set project

GKE

  • Display a list of credentialed accounts: gcloud auth list

  • Set the active account: gcloud config set account

  • Set kubectl context: gcloud container clusters get-credentials

  • Change region: gcloud config set compute/region us-west

  • Change zone: gcloud config set compute/zone us-west1-b

  • List all container clusters: gcloud container clusters list

IAM

  • Authenticate client: gcloud auth activate-service-account --key-file

  • Display a list of credentialed accounts: gcloud auth list

  • Set the active account: gcloud config set account

  • Auth to GCP Container Registry: gcloud auth configure-docker

  • Print token for active account: gcloud auth print-access-token, gcloud auth print-refresh-token

  • Revoke previous generated credential: gcloud auth revoke

BUCKET SECURITY

  • Make all files readable: gsutil -m acl set -R -a public-read gs:///

  • Config auth: gsutil config -a

  • Grant bucket access: gsutil iam ch user:denny@gmail.com:objectCreator,objectViewer gs://

  • Remove bucket access: gsutil iam ch -d user:denny@gmail.com:objectCreator,objectViewer gs://

VM

  • List all instances: gcloud compute instances list, gcloud compute instance-templates list

  • Show instance info: gcloud compute instances describe "" --project "" --zone "us-west2-a"

  • Stop an instance: gcloud compute instances stop instance-2

  • Start an instance: gcloud compute instances start instance-2

  • Create an instance: gcloud compute instances create vm1 --image image-1 --tags test --zone "" --machine-type f1-micro

  • SSH to instance: gcloud compute ssh --project "" --zone "" ""

  • Download files: gcloud compute copy-files example-instance:~/REMOTE-DIR ~/LOCAL-DIR --zone us-central1-a

  • Upload files: gcloud compute copy-files ~/LOCAL-FILE-1 example-instance:~/REMOTE-DIR --zone us-central1-a

DISKS & VOLUMES

  • List all disks: gcloud compute disks list

  • List all disk types: gcloud compute disk-types list

  • List all snapshots: gcloud compute snapshots list

  • Create snapshot: gcloud compute disks snapshot --snapshotname --zone $zone

NETWORK

  • List all networks: gcloud compute networks list

  • Detail of one network: gcloud compute networks describe --format json

  • Create network: gcloud compute networks create

  • Create subnet: gcloud compute networks subnets create subnet1 --network net1 --range 10.5.4.0/24

  • Get a static ip: gcloud compute addresses create --region us-west2-a vpn-1-static-ip

  • List all ip addresses: gcloud compute addresses list

  • Describe ip address: gcloud compute addresses describe --region us-central1

  • List all routes: gcloud compute routes list

DNS

  • List of all record-sets in my zone: gcloud dns record-sets list --zone my_zone

  • List first 10 DNS records: gcloud dns record-sets list --zone my_zone --limit=10

FIREWALL

  • List all firewall rules: gcloud compute firewall-rules list

  • List all forwarding rules: gcloud compute forwarding-rules list

  • Describe one firewall rule: gcloud compute firewall-rules describe

  • Create one firewall rule: gcloud compute firewall-rules create my-rule --network default --allow tcp:9200 tcp:3306

  • Update one firewall rule: gcloud compute firewall-rules update default --network default --allow tcp:9200 tcp:9300

IMAGES & CONTAINERS

  • List all images: gcloud compute images list

  • List all container clusters: gcloud container clusters list

  • Set kubectl context: gcloud container clusters get-credentials

RDS

  • List all sql instances: gcloud sql instances list

SERVICES

  • List my backend services: gcloud compute backend-services list

  • List all my health check endpoints: gcloud compute http-health-checks list

  • List all URL maps: gcloud compute url-maps list