awesome-cheatsheets/tools/gcp.md

5.4 KiB

GCLOUD SDK AND TOOLBELT CHEATSHEET

GCP BASICS

  • Check Version and Settings: gcloud version, gcloud info, gcloud components list

  • Init Profile: gcloud init This will ask you to open an OpenID URL

  • List all zones: gcloud compute zones list

  • Upgrade local SDK: gcloud components update, gcloud components update --version 219.0.1

BUCKET BASICS

  • List all buckets and files: gsutil ls, gsutil ls -lh gs://

  • Download file: gsutil cp gs:////package-1.1.tgz .

  • Upload file: gsutil cp gs:////

  • Cat file: gsutil cat gs:////

  • Delete file: gsutil rm gs:///

  • Move file: gsutil mv gs:////

  • Copy folder: gsutil cp -r ./conf gs:///

  • Show disk usage: gsutil du -h gs:////

  • Create bucket: gsutil mb gs://

  • Caculate file sha1sum: gsha1sum syslog-migration-10.0.2.tgz, shasum syslog-migration-10.0.2.tgz

  • Gsutil help: gsutil help, gsutil help cp, gsutil help options

GCP PROJECT

  • List projects : gcloud config list, gcloud config list project

  • Show project info : gcloud compute project-info describe

  • Switch project : gcloud config set project

GKE

  • Display a list of credentialed accounts : gcloud auth list

  • Set the active account : gcloud config set account

  • Set kubectl context : gcloud container clusters get-credentials

  • Change region : gcloud config set compute/region us-west

  • Change zone : gcloud config set compute/zone us-west1-b

  • List all container clusters : gcloud container clusters list

IAM

  • Authenticate client : gcloud auth activate-service-account --key-file

  • Display a list of credentialed accounts : gcloud auth list

  • Set the active account : gcloud config set account

  • Auth to GCP Container Registry : gcloud auth configure-docker

  • Print token for active account : gcloud auth print-access-token, gcloud auth print-refresh-token

  • Revoke previous generated credential : gcloud auth revoke

BUCKET SECURITY

  • Make all files readable : gsutil -m acl set -R -a public-read gs:///

  • Config auth : gsutil config -a

  • Grant bucket access : gsutil iam ch user:denny@gmail.com:objectCreator,objectViewer gs://

  • Remove bucket access : gsutil iam ch -d user:denny@gmail.com:objectCreator,objectViewer gs://

VM

  • List all instances : gcloud compute instances list, gcloud compute instance-templates list

  • Show instance info : gcloud compute instances describe "" --project "" --zone "us-west2-a"

  • Stop an instance : gcloud compute instances stop instance-2

  • Start an instance : gcloud compute instances start instance-2

  • Create an instance : gcloud compute instances create vm1 --image image-1 --tags test --zone "" --machine-type f1-micro

  • SSH to instance : gcloud compute ssh --project "" --zone "" ""

  • Download files : gcloud compute copy-files example-instance:~/REMOTE-DIR ~/LOCAL-DIR --zone us-central1-a

  • Upload files : gcloud compute copy-files ~/LOCAL-FILE-1 example-instance:~/REMOTE-DIR --zone us-central1-a

DISKS & VOLUMES

  • List all disks : gcloud compute disks list

  • List all disk types : gcloud compute disk-types list

  • List all snapshots : gcloud compute snapshots list

  • Create snapshot : gcloud compute disks snapshot --snapshotname --zone $zone

NETWORK

  • List all networks : gcloud compute networks list

  • Detail of one network : gcloud compute networks describe --format json

  • Create network : gcloud compute networks create

  • Create subnet : gcloud compute networks subnets create subnet1 --network net1 --range 10.5.4.0/24

  • Get a static ip : gcloud compute addresses create --region us-west2-a vpn-1-static-ip

  • List all ip addresses : gcloud compute addresses list

  • Describe ip address : gcloud compute addresses describe --region us-central1

  • List all routes : gcloud compute routes list

DNS

  • List of all record-sets in my zone : gcloud dns record-sets list --zone my_zone

  • List first 10 DNS records : gcloud dns record-sets list --zone my_zone --limit=10

FIREWALL

  • List all firewall rules : gcloud compute firewall-rules list

  • List all forwarding rules : gcloud compute forwarding-rules list

  • Describe one firewall rule : gcloud compute firewall-rules describe

  • Create one firewall rule : gcloud compute firewall-rules create my-rule --network default --allow tcp:9200 tcp:3306

  • Update one firewall rule : gcloud compute firewall-rules update default --network default --allow tcp:9200 tcp:9300

IMAGES & CONTAINERS

  • List all images : gcloud compute images list

  • List all container clusters : gcloud container clusters list

  • Set kubectl context : gcloud container clusters get-credentials

RDS

  • List all sql instances : gcloud sql instances list

SERVICES

  • List my backend services : gcloud compute backend-services list

  • List all my health check endpoints : gcloud compute http-health-checks list

  • List all URL maps : gcloud compute url-maps list