gcloud commands

8 commands, each with a one-line explanation. Click a command to copy it, or its title for details.

Commands 8 shown

  • Activate service account
    gcloud auth activate-service-account --key-file=key.json && gcloud config set project <id>

    Auth as SA in CI; note: prefer workload identity over long-lived key files

    ci · secrets · cloud

  • GKE kubeconfig credentials
    gcloud container clusters get-credentials <cluster> --region <id> --project <id>

    Fetch GKE kubeconfig; modern: needs gke-gcloud-auth-plugin in PATH since k8s 1.26

    k8s · cloud

  • List instances with external IP
    gcloud compute instances list --format="table(name,status,EXTERNAL_IP)" --filter="status=RUNNING"

    Custom table of running VMs and public IPs via --format/--filter projections

    network · cloud

  • Flatten IAM bindings by member
    gcloud projects get-iam-policy <id> --flatten="bindings[].members" --format="table(bindings.role,bindings.members)"

    Audit who has which role; --flatten explodes nested bindings into rows

    security · cloud

  • Read recent error logs
    gcloud logging read 'severity>=ERROR' --limit 20 --freshness=1h --format='value(timestamp,resource.type,textPayload)'

    Pull last hour of errors across project; --freshness avoids full scan

    observability · troubleshooting · cloud

  • SSH via IAP tunnel
    gcloud compute ssh <name> --zone <id> --tunnel-through-iap

    Reach a VM with no public IP through Identity-Aware Proxy; no bastion needed

    network · security · cloud

  • Read secret payload
    gcloud secrets versions access latest --secret=<name> --project <id>

    Print latest Secret Manager version to stdout; pin a version in CI for repeatability

    secrets · ci · cloud

  • Storage rsync to bucket
    gcloud storage rsync -r -d ./build gs://<name>/site

    Mirror dir to GCS; -d deletes extras, modern replacement for gsutil rsync

    disk · cloud