Read secret payload gcloud
Print latest Secret Manager version to stdout; pin a version in CI for repeatability
gcloud secrets versions access latest --secret=<name> --project <id>
more gcloud
all 8 commands →
Storage rsync to bucket
gcloud storage rsync -r -d ./build gs://<name>/site
Activate service account
gcloud auth activate-service-account --key-file=key.json && gcloud config set project <id>
GKE kubeconfig credentials
gcloud container clusters get-credentials <cluster> --region <id> --project <id>
List instances with external IP
gcloud compute instances list --format="table(name,status,EXTERNAL_IP)" --filter="status=RUNNING"
Flatten IAM bindings by member
gcloud projects get-iam-policy <id> --flatten="bindings[].members" --format="table(bindings.role,bindings.members)"