Flatten IAM bindings by member gcloud
Audit who has which role; --flatten explodes nested bindings into rows
gcloud projects get-iam-policy <id> --flatten="bindings[].members" --format="table(bindings.role,bindings.members)"
more gcloud
all 8 commands →
Read recent error logs
gcloud logging read 'severity>=ERROR' --limit 20 --freshness=1h --format='value(timestamp,resource.type,textPayload)'
SSH via IAP tunnel
gcloud compute ssh <name> --zone <id> --tunnel-through-iap
Read secret payload
gcloud secrets versions access latest --secret=<name> --project <id>
Storage rsync to bucket
gcloud storage rsync -r -d ./build gs://<name>/site
Activate service account
gcloud auth activate-service-account --key-file=key.json && gcloud config set project <id>