Karn Wong's Docs

Appearance

GCP ​

Pricing ​

Administration ​

Services ​

Artifact Registry ​

Cloud Run ​

Compute Engine ​

GKE ​

IAM ​

Differences between iam_binding and iam_member:

  • binding revokes any other members from the role to which it applies
  • member just adds a member alongside existing members.

Networking ​

Logging ​

Filter by principal

bash
protoPayload.authenticationInfo.principalEmail="[email protected]"

gcloud ​

gcloud login ​

bash
gcloud auth login --update-adc
gcloud config set account $ACCOUNT_NAME
gcloud config configurations list
gcloud config configurations activate $ACCOUNT_NAME

Multi-profile setup ​

For gcloud cli

bash
gcloud config configurations create work-profile
gcloud auth login [email protected]
gcloud config set project work-project-id

For application

bash
CLOUDSDK_ACTIVE_CONFIG_NAME=work-profile
CLOUDSDK_CORE_PROJECT=work-project-id
GOOGLE_APPLICATION_CREDENTIALS=~/.config/gcloud/application_default_credentials.work.json

Usage ​

bash
# Switch to work
gcloud config configurations activate work
gcloud auth application-default login

# Switch to personal
gcloud config configurations activate personal
gcloud auth application-default login

Get bearer token ​

bash
gcloud auth print-identity-token

GCP SDK ​

Colab login ​

python
from google.colab import auth

auth.authenticate_user()

Docker ​

yaml
backend:
  build: backend
  ports:
    - 8000:8000
  environment:
    GOOGLE_APPLICATION_CREDENTIALS: /opt/application_default_credentials.json
  volumes:
    - ~/.config/gcloud/application_default_credentials.json:/opt/application_default_credentials.json

Set PROJECT_ID from environment variable ​

bash
GOOGLE_CLOUD_PROJECT=foo
GOOGLE_CLOUD_QUOTA_PROJECT=bar

Cookbook ​

Set up cloud-sql-proxy ​

bash
brew install --cask google-cloud-sdk
gcloud auth application-default login

# see Releases for other versions
URL="https://storage.googleapis.com/cloud-sql-connectors/cloud-sql-proxy/v2.6.1"
curl "$URL/cloud-sql-proxy.darwin.arm64" -o cloud-sql-proxy
chmod +x cloud-sql-proxy
sudo mv cloud-sql-proxy /usr/local/bin/

cloud-sql-proxy --port <INTERNAL> <INSTANCE_CONNECTION_NAME>

Resources ​