Skip to main content

Google Cloud Platform

This Integration is part of the GCP Pack.#

Supported versions

Supported Cortex XSOAR versions: 8.11.0 and later.

The GCP Integration automates management and security configurations for Compute Engine, Storage, and Container resources on GCP. This integration was integrated and tested with version v1 (Compute, Storage, Container, SERVICE_USAGE), v3 (Resource Manager).

Configure Google Cloud Platform in Cortex#

ParameterRequired
Service Account Private Key file content (JSON).False
Use system proxy settingsFalse
Trust any certificate (not secure)False

Commands#

You can execute these commands from the CLI, as part of an automation, or in a playbook. After you successfully execute a command, a DBot message appears in the War Room with the command details.

gcp-compute-firewall-patch#


Updates the specified firewall rule with the data included in the request.

Base Command#

gcp-compute-firewall-patch

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
resource_nameName of the firewall rule to update.Required
descriptionAn optional description of this resource, which you provide when you create the resource.Optional
networkURL of the network resource for this firewall rule. If not specified when creating a firewall rule, the default network is used.Optional
priorityPriority for this rule. This is an integer between 0 and 65535, both inclusive. When not specified, the value assumed is 1000. Relative priorities determine precedence of conflicting rules. Lower value of priority implies higher precedence (eg, a rule with priority 0 has higher precedence than a rule with priority 1). DENY rules take precedence over ALLOW rules.Optional
sourceRangesIf source ranges are specified, the firewall applies only to traffic with source IP addresses in these ranges. These ranges must be expressed in CIDR format. One or both of sourceRanges and sourceTags may be set. If both properties are set, the firewall applies to traffic with a source IP address within sourceRanges OR the source IP belonging to a tag listed in the sourceTags property. The connection does not need to match both properties for the firewall to apply. Only IPv4 is supported, comma-separated.Optional
destinationRangesIf destination ranges are specified, the firewall applies only to traffic with destination IP addresses in these ranges. These ranges must be expressed in CIDR format. Only IPv4 is supported. Comma-separated.Optional
sourceTagsIf source tags are specified, the firewall rule applies only to traffic with source IPs that match the primary network interfaces of VM instances that have the tag and are in the same VPC network. Source tags cannot be used to control traffic to an instance's external IP address. It only applies to traffic between instances in the same virtual network, because tags are associated with instances, not IP addresses. One or both of sourceRanges and sourceTags may be set. If both properties are set, the firewall will apply to traffic with a source IP address within sourceRanges OR the source IP belonging to a tag listed in the sourceTags property. The connection does not need to match both properties for the firewall to apply. Comma-separated.Optional
targetTagsA list of tags that controls which instances the firewall rule applies to. If targetTags are specified, then the firewall rule applies only to instances in the VPC network that have one of those tags. If no targetTags are specified, the firewall rule applies to all instances on the specified network. Comma-separated.Optional
sourceServiceAccountsIf source service accounts are specified, the firewall applies only to traffic originating from an instance with a service account in this list. Source service accounts cannot be used to control traffic to an instance's external IP address because service accounts are associated with an instance, not an IP address. sourceRanges can be set at the same time as sourceServiceAccounts. If both are set, the firewall will apply to traffic that has a source IP address within sourceRanges OR the source IP belongs to an instance with a service account listed in sourceServiceAccount. The connection does not need to match both properties for the firewall to apply. sourceServiceAccounts cannot be used simultaneously as sourceTags or targetTags. Comma-separated.Optional
targetServiceAccountsA list of service accounts indicating sets of instances located in the network that may make network connections as specified in allowed[]. targetServiceAccounts cannot be used at the same time as targetTags or sourceTags. If neither targetServiceAccounts nor targetTags are specified, the firewall rule applies to all instances on the specified network. Comma-separated.Optional
allowedThe ALLOW rules list specified by this firewall. Each rule specifies a protocol and port-range tuple that describes a permitted connection. For example, ipprotocol=tcp,ports=22,443;ipprotocol=tcp,ports=8080,80.Optional
deniedThe DENY rules list specified by this firewall. Each rule specifies a protocol and port-range tuple that describes a denied connection. For example, ipprotocol=tcp,ports=22,443;ipprotocol=tcp,ports=8080,80.Optional
directionDirection of traffic to which this firewall applies; default is INGRESS. Note: For INGRESS traffic, it is NOT supported to specify destinationRanges; For EGRESS traffic, it is NOT supported to specify sourceRanges OR sourceTags.Optional
logConfigEnableThis field denotes whether to enable logging for a particular firewall rule. Possible values are: true, false.Optional
disabledDenotes whether the firewall rule is disabled, i.e not applied to the network it is associated with. When set to true, the firewall rule is not enforced and the network behaves as if it did not exist. If this is unspecified, the firewall rule will be enabled. Possible values are: true, false.Optional

Context Output#

PathTypeDescription
GCP.Compute.Operations.idstringThe unique identifier for the resource. This identifier is defined by the server.
GCP.Compute.Operations.namestringName of the resource.
GCP.Compute.Operations.zonestringThe URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
GCP.Compute.Operations.clientOperationIdstringThe value of requestId if you provided it in the request. Not present otherwise.
GCP.Compute.Operations.operationTypestringThe type of operation, such as insert, update, or delete, and so on.
GCP.Compute.Operations.targetLinkstringThe URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created.
GCP.Compute.Operations.targetIdstringThe unique target ID, which identifies a specific incarnation of the target resource.
GCP.Compute.Operations.statusstringThe status of the operation, which can be one of the following: PENDING, RUNNING or DONE.
GCP.Compute.Operations.statusMessagestringAn optional textual description of the current status of the operation.
GCP.Compute.Operations.userstringThe user who requested the operation, for example, EMAILADDRESS.
GCP.Compute.Operations.progressnumberAn optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses.
GCP.Compute.Operations.insertTimestringThe time the operation was requested, in RFC3339 text format.
GCP.Compute.Operations.startTimestringThe time that this operation was started by the server. This value is in RFC3339 text format.
GCP.Compute.Operations.endTimestringThe time that this operation was completed. This value is in RFC3339 text format.
GCP.Compute.Operations.errorstringIf errors are generated during processing of the operation, this field will be populated.
GCP.Compute.Operations.warningsstringIf warning messages are generated during processing of the operation, this field will be populated.
GCP.Compute.Operations.httpErrorStatusCodenumberIf the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
GCP.Compute.Operations.httpErrorMessagestringIf the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
GCP.Compute.Operations.selfLinkstringServer-defined URL for the resource.
GCP.Compute.Operations.regionstringThe URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
GCP.Compute.Operations.descriptionstringA textual description of the operation, which is set when the operation is created.
GCP.Compute.Operations.kindstringType of the resource. Always compute#operation for Operation resources.

gcp-storage-bucket-policy-delete#


Removes an entity from a bucket's Access Control List.

Base Command#

gcp-storage-bucket-policy-delete

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
resource_nameName of the GCS bucket.Required
entityEntity to remove from the Access Control List.
Common entity formats are:
user:<userId or email>
group:<groupId or email>
allUsers
allAuthenticatedUsers
For more options and details, see: https://cloud.google.com/storage/docs/json_api/v1/bucketAccessControls#resource . Default is allUsers.
Optional

Context Output#

There is no context output for this command.

gcp-compute-subnet-update#


Enables flow logs or Private Google Access on a subnet.

Base Command#

gcp-compute-subnet-update

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
regionGCP region.Required
resource_nameSubnet name.Required
enable_flow_logsEnable VPC Flow Logs. Possible values are: true, false.Optional
enable_private_ip_google_accessEnable Private Google Access. Possible values are: true, false.Optional

Context Output#

PathTypeDescription
GCP.Compute.Operations.nameStringThe name of the updated subnet.
GCP.Compute.Operations.regionStringThe region of the updated subnet.
GCP.Compute.Operations.subnetNameStringThe name of the subnet that was updated.
GCP.Compute.Operations.enableFlowLogsBooleanWhether flow logs are enabled for the subnet.
GCP.Compute.Operations.ipCidrRangeStringThe updated CIDR range for the subnet.
GCP.Compute.Operations.privateIpGoogleAccessBooleanWhether private Google access is enabled for the subnet.
GCP.Compute.Operations.privateIpv6GoogleAccessBooleanWhether private IPv6 Google access is enabled for the subnet.
GCP.Compute.Operations.stackTypeStringThe stack type of the subnet (e.g., `IPV4`, `IPV6`).
GCP.Compute.Operations.rangeNameStringThe name of the IP range associated with the subnet.
GCP.Compute.Operations.secondaryIpRangesUnknownList of secondary IP ranges for the subnet.
GCP.Compute.Operations.descriptionStringThe description of the subnet.

gcp-container-cluster-security-update#


Configures security settings for GKE clusters, including access controls and visibility.

Base Command#

gcp-container-cluster-security-update

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
regionGCP region.Required
resource_nameName of the GKE cluster.Required
enable_intra_node_visibilityEnable intra-node visibility. Possible values are: true, false.Optional
enable_master_authorized_networksEnable Master Authorized Networks. Possible values are: true, false.Optional
cidrsComma-separated list of up to 50 CIDR blocks (e.g., "192.168.0.0/24,10.0.0.0/32") that are allowed to access the Kubernetes master via HTTPS.
If enable_master_authorized_networks is true and no CIDRs are provided, all access will be blocked.
.
Optional

Context Output#

PathTypeDescription
GCP.Container.Operations.nameStringThe name of the GKE cluster.
GCP.Container.Operations.zoneStringThe zone of the GKE cluster.
GCP.Container.Operations.enableStackdriverLoggingBooleanWhether Stackdriver Logging is enabled for the cluster.
GCP.Container.Operations.enableStackdriverMonitoringBooleanWhether Stackdriver Monitoring is enabled for the cluster.
GCP.Container.Operations.enablePrivateNodesBooleanWhether private nodes are enabled for the GKE cluster.
GCP.Container.Operations.enablePrivateEndpointBooleanWhether private endpoint is enabled for the GKE cluster control plane.
GCP.Container.Operations.enableHttpsOnlyBooleanWhether HTTPS-only traffic is enforced for the cluster.
GCP.Container.Operations.enableNetworkPolicyBooleanWhether network policies are enabled for the cluster.
GCP.Container.Operations.enableAutoscalingBooleanWhether autoscaling is enabled for the cluster nodes.
GCP.Container.Operations.enableIstioBooleanWhether Istio is enabled for the GKE cluster.
GCP.Container.Operations.enablePodSecurityPolicyBooleanWhether PodSecurityPolicy is enabled for the GKE cluster.
GCP.Container.Operations.enableBinaryAuthorizationBooleanWhether Binary Authorization is enabled for the cluster.
GCP.Container.Operations.enableLegacyABACBooleanWhether legacy ABAC is enabled for the cluster.
GCP.Container.Operations.clusterIpv4CidrStringThe cluster’s IPv4 CIDR block.
GCP.Container.Operations.masterAuthorizedNetworksConfig.cidrBlocksUnknownList of authorized CIDR blocks that can access the GKE cluster master.
GCP.Container.Operations.masterAuthorizedNetworksConfig.enabledBooleanWhether master authorized networks are enabled for the cluster.
GCP.Container.Operations.networkStringThe network to which the GKE cluster belongs.
GCP.Container.Operations.subnetworkStringThe subnetwork to which the GKE cluster belongs.
GCP.Container.Operations.loggingServiceStringThe logging service used for the cluster (e.g., "logging.googleapis.com").
GCP.Container.Operations.monitoringServiceStringThe monitoring service used for the cluster (e.g., "monitoring.googleapis.com").
GCP.Container.Operations.nodePoolsUnknownA list of node pools in the cluster, with their configuration and security settings.
GCP.Container.Operations.privateClusterConfig.enablePrivateNodesBooleanWhether private nodes are enabled in the cluster.
GCP.Container.Operations.privateClusterConfig.enablePrivateEndpointBooleanWhether private endpoint is enabled for the cluster control plane.
GCP.Container.Operations.masterVersionStringThe current version of the Kubernetes master in the GKE cluster.

gcp-storage-bucket-metadata-update#


Updates the metadata of a Google Cloud Storage (GCS) bucket, including settings such as versioning and Uniform Bucket-Level Access (UBLA).

Base Command#

gcp-storage-bucket-metadata-update

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
resource_nameName of the bucket.Required
enable_versioningEnable versioning. Possible values are: true, false.Optional
enable_uniform_accessEnable uniform bucket-level access. Possible values are: true, false.Optional

Context Output#

PathTypeDescription
GCP.StorageBucket.MetadataUnknownUpdated bucket metadata.
GCP.StorageBucket.Metadata.nameStringThe name of the GCP bucket.
GCP.StorageBucket.Metadata.idStringThe ID of the GCP bucket.
GCP.StorageBucket.Metadata.locationStringThe location of the bucket.
GCP.StorageBucket.Metadata.storageClassStringThe storage class of the bucket (e.g., STANDARD, NEARLINE).
GCP.StorageBucket.Metadata.createdDateThe creation timestamp of the bucket.
GCP.StorageBucket.Metadata.updatedDateThe last update timestamp of the bucket.
GCP.StorageBucket.Metadata.metagenerationNumberThe metadata generation of the bucket.
GCP.StorageBucket.Metadata.labelsUnknownThe labels attached to the bucket.
GCP.StorageBucket.Metadata.defaultEventBasedHoldBooleanWhether a default event-based hold is enabled on the bucket.
GCP.StorageBucket.Metadata.retentionPolicy.retentionPeriodNumberThe duration in seconds that objects in the bucket must be retained.
GCP.StorageBucket.Metadata.retentionPolicy.effectiveTimeDateThe time from which the retention policy is effective.
GCP.StorageBucket.Metadata.retentionPolicy.isLockedBooleanWhether the retention policy is locked.
GCP.StorageBucket.Metadata.versioning.enabledBooleanWhether object versioning is enabled.
GCP.StorageBucket.Metadata.logging.logBucketStringThe destination bucket where access logs are stored.
GCP.StorageBucket.Metadata.logging.logObjectPrefixStringThe object prefix used for logging.
GCP.StorageBucket.Metadata.lifecycle.ruleUnknownA list of lifecycle management rules for the bucket.
GCP.StorageBucket.Metadata.iamConfiguration.uniformBucketLevelAccessBooleanWhether uniform bucket-level access is enabled.
GCP.StorageBucket.Metadata.corsUnknownCORS configuration for the bucket.
GCP.StorageBucket.Metadata.customPlacementConfigUnknownCustom placement configuration for multi-region buckets.
GCP.StorageBucket.Metadata.encryption.defaultKmsKeyNameStringThe default Cloud KMS key used to encrypt objects.
GCP.StorageBucket.Metadata.billing.requesterPaysBooleanWhether requester pays is enabled.
GCP.StorageBucket.Metadata.website.mainPageSuffixStringSuffix appended to requests for the bucket's website configuration.
GCP.StorageBucket.Metadata.website.notFoundPageStringThe path to the custom 404 page for the bucket website.

gcp-iam-project-policy-binding-remove#


Removes a specified IAM role binding from a GCP project.

Base Command#

gcp-iam-project-policy-binding-remove

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
memberMember to remove (e.g., user:test@example.com).Required
roleRole to remove (e.g., roles/viewer).Required

Context Output#

There is no context output for this command.

gcp-compute-instance-service-account-set#


Sets the service account for a GCP Compute Engine VM instance. The instance must be stopped before the service account can be changed.

Base Command#

gcp-compute-instance-service-account-set

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
zoneThe name of the zone for this request.Required
resource_nameName of the VM instance.Required
service_account_emailEmail of the service account.Required
scopesOAuth scopes to assign (full URLs), e.g., https://www.googleapis.com/auth/cloud-platform. Empty list means no scopes.Required

Context Output#

PathTypeDescription
GCP.Compute.Operations.idstringThe unique identifier for the resource. This identifier is defined by the server.
GCP.Compute.Operations.namestringName of the resource.
GCP.Compute.Operations.zonestringThe URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
GCP.Compute.Operations.clientOperationIdstringThe value of requestId if you provided it in the request. Not present otherwise.
GCP.Compute.Operations.operationTypestringThe type of operation, such as insert, update, or delete, and so on.
GCP.Compute.Operations.targetLinkstringThe URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created.
GCP.Compute.Operations.targetIdstringThe unique target ID, which identifies a specific incarnation of the target resource.
GCP.Compute.Operations.statusstringThe status of the operation, which can be one of the following: PENDING, RUNNING or DONE.
GCP.Compute.Operations.statusMessagestringAn optional textual description of the current status of the operation.
GCP.Compute.Operations.userstringThe user who requested the operation, for example, EMAILADDRESS.
GCP.Compute.Operations.progressnumberAn optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses.
GCP.Compute.Operations.insertTimestringThe time the operation was requested, in RFC3339 text format.
GCP.Compute.Operations.startTimestringThe time that this operation was started by the server. This value is in RFC3339 text format.
GCP.Compute.Operations.endTimestringThe time that this operation was completed. This value is in RFC3339 text format.
GCP.Compute.Operations.errorstringIf errors are generated during processing of the operation, this field will be populated.
GCP.Compute.Operations.warningsstringIf warning messages are generated during processing of the operation, this field will be populated.
GCP.Compute.Operations.httpErrorStatusCodenumberIf the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
GCP.Compute.Operations.httpErrorMessagestringIf the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
GCP.Compute.Operations.selfLinkstringServer-defined URL for the resource.
GCP.Compute.Operations.regionstringThe URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
GCP.Compute.Operations.descriptionstringA textual description of the operation, which is set when the operation is created.
GCP.Compute.Operations.kindstringType of the resource. Always compute#operation for Operation resources.

gcp-compute-instance-service-account-remove#


Removes the service account associated with a GCP Compute Engine VM instance. The instance must be stopped before the service account can be changed.

Base Command#

gcp-compute-instance-service-account-remove

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
zoneThe name of the zone for this request.Required
resource_nameName of the VM instance.Required

Context Output#

PathTypeDescription
GCP.Compute.Operations.idstringThe unique identifier for the resource. This identifier is defined by the server.
GCP.Compute.Operations.namestringName of the resource.
GCP.Compute.Operations.zonestringThe URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
GCP.Compute.Operations.clientOperationIdstringThe value of requestId if you provided it in the request. Not present otherwise.
GCP.Compute.Operations.operationTypestringThe type of operation, such as insert, update, or delete, and so on.
GCP.Compute.Operations.targetLinkstringThe URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created.
GCP.Compute.Operations.targetIdstringThe unique target ID, which identifies a specific incarnation of the target resource.
GCP.Compute.Operations.statusstringThe status of the operation, which can be one of the following: PENDING, RUNNING or DONE.
GCP.Compute.Operations.statusMessagestringAn optional textual description of the current status of the operation.
GCP.Compute.Operations.userstringThe user who requested the operation, for example, EMAILADDRESS.
GCP.Compute.Operations.progressnumberAn optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses.
GCP.Compute.Operations.insertTimestringThe time that this operation was requested. This value is in RFC3339 text format.
GCP.Compute.Operations.startTimestringThe time that this operation was started by the server. This value is in RFC3339 text format.
GCP.Compute.Operations.endTimestringThe time that this operation was completed. This value is in RFC3339 text format.
GCP.Compute.Operations.errorstringIf errors are generated during processing of the operation, this field will be populated.
GCP.Compute.Operations.warningsstringIf warning messages are generated during processing of the operation, this field will be populated.
GCP.Compute.Operations.httpErrorStatusCodenumberIf the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
GCP.Compute.Operations.httpErrorMessagestringIf the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
GCP.Compute.Operations.selfLinkstringServer-defined URL for the resource.
GCP.Compute.Operations.regionstringThe URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
GCP.Compute.Operations.descriptionstringA textual description of the operation, which is set when the operation is created.
GCP.Compute.Operations.kindstringType of the resource. Always compute#operation for Operation resources.

gcp-compute-instance-start#


Starts an instance that was stopped using the instances().stop method.

Base Command#

gcp-compute-instance-start

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
zoneThe name of the zone for this request.Required
resource_nameName of the instance resource to start.Required

Context Output#

PathTypeDescription
GCP.Compute.Operations.idstringThe unique identifier for the resource. This identifier is defined by the server.
GCP.Compute.Operations.namestringName of the resource.
GCP.Compute.Operations.zonestringThe URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
GCP.Compute.Operations.clientOperationIdstringThe value of requestId if you provided it in the request. Not present otherwise.
GCP.Compute.Operations.operationTypestringThe type of operation, such as insert, update, or delete, and so on.
GCP.Compute.Operations.targetLinkstringThe URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created.
GCP.Compute.Operations.targetIdstringThe unique target ID, which identifies a specific incarnation of the target resource.
GCP.Compute.Operations.statusstringThe status of the operation, which can be one of the following: PENDING RUNNING or DONE.
GCP.Compute.Operations.statusMessagestringAn optional textual description of the current status of the operation.
GCP.Compute.Operations.userstringThe user who requested the operation, for example, EMAILADDRESS.
GCP.Compute.Operations.progressnumberAn optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses.
GCP.Compute.Operations.insertTimestringThe time that this operation was requested. This value is in RFC3339 text format.
GCP.Compute.Operations.startTimestringThe time that this operation was started by the server. This value is in RFC3339 text format.
GCP.Compute.Operations.endTimestringThe time that this operation was completed. This value is in RFC3339 text format.
GCP.Compute.Operations.errorstringIf errors are generated during processing of the operation, this field will be populated.
GCP.Compute.Operations.warningsstringIf warning messages are generated during processing of the operation, this field will be populated.
GCP.Compute.Operations.httpErrorStatusCodenumberIf the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
GCP.Compute.Operations.httpErrorMessagestringIf the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
GCP.Compute.Operations.selfLinkstringServer-defined URL for the resource.
GCP.Compute.Operations.regionstringThe URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
GCP.Compute.Operations.descriptionstringA textual description of the operation, which is set when the operation is created.
GCP.Compute.Operations.kindstringType of the resource. Always compute#operation for Operation resources.

gcp-compute-instance-stop#


Stops a running instance, shutting it down cleanly, and allows you to restart the instance at a later time. Stopped instances do not incur VM usage charges while they are stopped. However, resources that the VM is using, such as persistent disks and static IP addresses, will continue to be charged until they are deleted.

Base Command#

gcp-compute-instance-stop

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
zoneThe name of the zone for this request.Required
resource_nameName of the instance resource to stop.Required

Context Output#

PathTypeDescription
GCP.Compute.Operations.idstringThe unique identifier for the resource. This identifier is defined by the server.
GCP.Compute.Operations.namestringName of the resource.
GCP.Compute.Operations.zonestringThe URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
GCP.Compute.Operations.clientOperationIdstringThe value of requestId if you provided it in the request. Not present otherwise.
GCP.Compute.Operations.operationTypestringThe type of operation, such as insert, update, or delete, and so on.
GCP.Compute.Operations.targetLinkstringThe URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk from which the snapshot was created.
GCP.Compute.Operations.targetIdstringThe unique target ID, which identifies a specific incarnation of the target resource.
GCP.Compute.Operations.statusstringThe status of the operation, which can be one of the following: PENDING RUNNING or DONE.
GCP.Compute.Operations.statusMessagestringAn optional textual description of the current status of the operation.
GCP.Compute.Operations.userstringThe user who requested the operation, for example, EMAILADDRESS.
GCP.Compute.Operations.progressnumberAn optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses.
GCP.Compute.Operations.insertTimestringThe time that this operation was requested. This value is in RFC3339 text format.
GCP.Compute.Operations.startTimestringThe time that this operation was started by the server. This value is in RFC3339 text format.
GCP.Compute.Operations.endTimestringThe time that this operation was completed. This value is in RFC3339 text format.
GCP.Compute.Operations.errorstringIf errors are generated during processing of the operation, this field will be populated.
GCP.Compute.Operations.warningsstringIf warning messages are generated during processing of the operation, this field will be populated.
GCP.Compute.Operations.httpErrorStatusCodenumberIf the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
GCP.Compute.Operations.httpErrorMessagestringIf the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
GCP.Compute.Operations.selfLinkstringServer-defined URL for the resource.
GCP.Compute.Operations.regionstringThe URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not configurable as a field in the request body.
GCP.Compute.Operations.descriptionstringA textual description of the operation, which is set when the operation is created.
GCP.Compute.Operations.kindstringType of the resource. Always compute#operation for Operation resources.

gcp-compute-instances-list#


Retrieves the list of instances in the specified zone.

Base Command#

gcp-compute-instances-list

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
zoneThe name of the zone for this request.Required
filtersA filter expression for resources listed in the response. The expression must specify a field name, a comparison operator (=, !=, >, or <), and a value, which can be a string, number, or boolean. For example, to exclude a Compute Engine instance named example-instance, use name != example-instance.Optional
limitThe maximum number of results per page that should be returned. Acceptable values are 0 to 500, inclusive. Default is 50.Optional
order_bySorts list results in a specific order. By default, results are returned in alphanumerical order based on the resource name. You can also sort results in descending order based on the creation timestamp using order_by="creationTimestamp desc".Optional
page_tokenSpecifies a page token. Set page_token to the nextPageToken returned by a previous list request to get the next page of results.Optional

Context Output#

PathTypeDescription
GCP.Compute.Instances.kindStringType of the resource.Always compute#instance for instances.
GCP.Compute.Instances.idStringThe unique identifier of the resource.
GCP.Compute.Instances.creationTimestampStringCreation timestamp in RFC3339 text format.
GCP.Compute.Instances.nameStringThe name of the resource, provided by the client when the resource is first created.
GCP.Compute.Instances.descriptionStringAn optional description for this resource.
GCP.Compute.Instances.tagsStringTags to apply to this instance.
GCP.Compute.Instances.machineTypeStringFull or partial URL of the machine type resource to use for this instance, in the format: zones/zone/machineTypes/machine-type.
GCP.Compute.Instances.statusStringThe status of the instance.
GCP.Compute.Instances.statusMessageStringAn optional, human-readable explanation of the status.
GCP.Compute.Instances.zoneStringURL of the zone where the instance resides.
GCP.Compute.Instances.canIpForwardStringAllows this instance to send and receive packets with non-matching destination or source IPs.
GCP.Compute.Instances.networkInterfacesObjectAn array of network configurations for the instance.
GCP.Compute.Instances.disksObjectArray of disks associated with the instance.
GCP.Compute.Instances.metadataObjectThe metadata key/value pairs assigned to the instance.
GCP.Compute.Instances.serviceAccountsObjectA list of service accounts, with their specified scopes, authorized for the instance.
GCP.Compute.Instances.selfLinkStringServer-defined URL for the resource.
GCP.Compute.Instances.schedulingObjectSets the scheduling options for the instance.
GCP.Compute.Instances.cpuPlatformStringThe CPU platform used by the instance.
GCP.Compute.Instances.labelsStringLabels to apply to the instance.
GCP.Compute.Instances.labelFingerprintStringA fingerprint for this request, which is essentially a hash of the label's contents and used for optimistic locking.
GCP.Compute.Instances.instanceEncryptionKeyObjectEncrypts suspended data for an instance with a customer-managed encryption key.
GCP.Compute.Instances.minCpuPlatformStringSpecifies a minimum CPU platform for the VM instance.
GCP.Compute.Instances.guestAcceleratorsObjectA list of the type and count of accelerator cards attached to the instance.
GCP.Compute.Instances.startRestrictedBooleanIndicates whether a VM has been restricted from starting because Compute Engine detected suspicious activity.
GCP.Compute.Instances.deletionProtectionBooleanWhether the resource should be protected against deletion.
GCP.Compute.Instances.resourcePoliciesStringResource policies applied to this instance.
GCP.Compute.Instances.sourceMachineImageStringSource machine image.
GCP.Compute.Instances.reservationAffinityObjectSpecifies the reservations that the instance can consume from.
GCP.Compute.Instances.hostnameStringSpecifies the hostname of the instance.
GCP.Compute.Instances.displayDeviceObjectEnables display device for the instance.
GCP.Compute.Instances.shieldedInstanceConfigObject
GCP.Compute.Instances.sourceMachineImageEncryptionKeyObjectThe source machine image encryption key used when creating an instance from a machine image.
GCP.Compute.Instances.confidentialInstanceConfigObject
GCP.Compute.Instances.fingerprintStringSpecifies a fingerprint for this resource, which is essentially a hash of the instance's contents and used for optimistic locking.
GCP.Compute.Instances.privateIpv6GoogleAccessStringThe private IPv6 Google access type for the VM.
GCP.Compute.Instances.advancedMachineFeaturesObjectControls for advanced machine-related behavior features.
GCP.Compute.Instances.lastStartTimestampStringLast start timestamp in RFC3339 text format.
GCP.Compute.Instances.lastStopTimestampStringLast stop timestamp in RFC3339 text format.
GCP.Compute.Instances.lastSuspendedTimestampStringLast suspended timestamp in RFC3339 text format.
GCP.Compute.Instances.satisfiesPzsString
GCP.Compute.Instances.satisfiesPziString
GCP.Compute.Instances.resourceStatusObjectThe resource status.
GCP.Compute.Instances.networkPerformanceConfigObjectNetwork performance configuration.
GCP.Compute.Instances.keyRevocationActionTypeStringKeyRevocationActionType of the instance.
GCP.Compute.InstancesNextPageTokenStringThe token used to retrieve the next page of results for list requests.
GCP.Compute.InstancesSelfLinkStringServer-defined URL for the resource.
GCP.Compute.InstancesWarningObjectInformational warning message.

gcp-compute-instance-labels-set#


Sets labels on an instance.

Base Command#

gcp-compute-instance-labels-set

Input#

Argument NameDescriptionRequired
instanceName of the instance resource to return.Required
project_idGCP project ID.Required
zoneThe name of the zone for this request.Required
labelsAn object containing a list of "key": value pairs, without spaces. Example: key=abc,value=123;key=ABC,value=321.Required
label_fingerprintFingerprint of the previous set of labels for this resource, used to prevent conflicts. Provide the latest fingerprint value when making a request to add or change labels.Required
add_labelsWhether to add the new labels to the existing ones or override the previous labels with the news. True - add, False - override. Possible values are: true, false. Default is false.Optional

Context Output#

PathTypeDescription
GCP.Compute.Operations.idstringThe unique identifier for the resource. This identifier is defined by the server.
GCP.Compute.Operations.namestringName of the resource.
GCP.Compute.Operations.zonestringThe URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body.
GCP.Compute.Operations.clientOperationIdstringThe value of requestId if you provided it in the request. Not present otherwise.
GCP.Compute.Operations.operationTypestringThe type of operation, such as insert, update, or delete.
GCP.Compute.Operations.targetLinkstringThe URL of the resource that the operation modifies. For snapshot-creation operations, this points to the persistent disk from which the snapshot was created.
GCP.Compute.Operations.targetIdstringThe unique target ID, which identifies a specific incarnation of the target resource.
GCP.Compute.Operations.statusstringThe status of the operation, which can be one of the following: PENDING, RUNNING or DONE.
GCP.Compute.Operations.statusMessagestringAn optional textual description of the current status of the operation.
GCP.Compute.Operations.userstringUser who requested the operation, for example, EMAILADDRESS.
GCP.Compute.Operations.progressnumberAn optional progress indicator ranging from 0 to 100. It does not need to be linear or support any specific granularity of operations. This indicator should not be used to estimate completion time. The value should monotonically increase as the operation progresses.
GCP.Compute.Operations.insertTimestringThe time the operation was requested, in RFC3339 text format.
GCP.Compute.Operations.startTimestringThe time that the operation was started by the server, in RFC3339 text format.
GCP.Compute.Operations.endTimestringThe time that the operation was completed, in RFC3339 text format.
GCP.Compute.Operations.errorstringIf errors are generated during processing of the operation, this field will be populated.
GCP.Compute.Operations.httpErrorStatusCodenumberIf the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
GCP.Compute.Operations.httpErrorMessagestringIf the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
GCP.Compute.Operations.selfLinkstringServer-defined URL for the resource.
GCP.Compute.Operations.regionstringThe URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body.
GCP.Compute.Operations.descriptionstringA textual description of the operation, which is set when the operation is created.
GCP.Compute.Operations.kindstringType of the resource. Always compute#operation for Operation resources.

gcp-compute-instance-get#


Returns the specified Instance resource. To get a list of available instances, make a list() request.

Base Command#

gcp-compute-instance-get

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
zoneThe name of the zone for this request.Required
instanceName of the instance resource to return.Required

Context Output#

PathTypeDescription
GCP.Compute.Instances.idstringThe unique identifier for the resource, defined by the server.
GCP.Compute.Instances.creationTimestampstringCreation timestamp in RFC3339 text format.
GCP.Compute.Instances.namestringThe name of the resource, provided by the client when first creating it. The name must be 1–63 characters long and comply with RFC1035. It must match the regular expression [a-z]([-a-z0-9]*[a-z0-9])?, meaning the first character must be a lowercase letter, and all following characters can be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
GCP.Compute.Instances.descriptionstringAn optional description of this resource. Provide this property when you create the resource.
GCP.Compute.Instances.tagsstringTags to apply to this instance. Tags identify valid sources or targets for network firewalls and are specified by the client during instance creation. Tags can later be modified using the setTags method. Each tag must comply with RFC1035. Multiple tags can be specified via the tags.items field.
GCP.Compute.Instances.tags.itemsstringAn array of tags. Each tag must be 1-63 characters long, and comply with RFC1035.
GCP.Compute.Instances.tags.fingerprintstringSpecifies a fingerprint for this request, which is essentially a hash of the tags contents and used for optimistic locking. The fingerprint is initially generated by Compute Engine and changes after every request to modify or update tags. You must always provide an up-to-date fingerprint hash in order to update or change tags.
GCP.Compute.Instances.machineTypestringFull or partial URL of the machine type resource to use for this instance, in the format: zones/zone/machineTypes/machine-type. This is provided by the client when the instance is created.
GCP.Compute.Instances.statusstringThe status of the instance. One of the following values: PROVISIONING, STAGING, RUNNING, STOPPING, STOPPED, SUSPENDING, SUSPENDED, and TERMINATED.
GCP.Compute.Instances.statusMessagestringAn optional, human-readable explanation of the status.
GCP.Compute.Instances.zonestringURL of the zone where the instance resides. This field must be specified in the HTTP request URL and cannot be set in the request body.
GCP.Compute.Instances.canIpForwardbooleanAllows this instance to send and receive packets with non-matching destination or source IPs. This is required if you plan to use this instance to forward routes.
GCP.Compute.Instances.networkInterfacesstringAn array of network configurations for this instance. These specify how interfaces are configured to interact with other network services, such as connecting to the internet. Multiple interfaces are supported per instance.
GCP.Compute.Instances.networkInterfaces.networkstringURL of the network resource for this instance. When creating an instance, if neither the network nor the subnetwork is specified, the default network global/networks/default is used; if the network is not specified but the subnetwork is specified, the network is inferred.
GCP.Compute.Instances.networkInterfaces.subnetworkstringThe URL of the Subnetwork resource for this instance. For legacy networks, do not provide this property. For auto subnet networks, specifying the subnetwork is optional. For custom subnet networks, this field must be specified. If provided, the subnetwork can be a full or partial URL.
GCP.Compute.Instances.networkInterfaces.networkIPstringAn IPv4 internal network address to assign to the instance for this network interface. If not specified by the user, an unused internal IP is assigned by the system.
GCP.Compute.Instances.networkInterfaces.namestringThe name of the network interface, generated by the server. For network devices, these are eth0, eth1, etc.
GCP.Compute.Instances.networkInterfaces.accessConfigsstringAn array of configurations for this interface. Currently, only one access config, ONE_TO_ONE_NAT, is supported. If there are no accessConfigs specified, then the instance will have no external internet access.
GCP.Compute.Instances.networkInterfaces.aliasIpRangesstringAn array of alias IP ranges for this network interface. Can only be specified for network interfaces on subnet-mode networks.
GCP.Compute.Instances.networkInterfaces.fingerprintstringFingerprint hash of the contents stored in this network interface. This field is ignored when inserting an instance or adding a network interface. To update the network interface, an up-to-date fingerprint must be provided; otherwise, the request fails with error 412 conditionNotMet.
GCP.Compute.Instances.networkInterfaces.kindstringType of the resource. Always compute#networkInterface for network interfaces.
GCP.Compute.Instances.disksstringArray of disks associated with this instance. Persistent disks must be created before you can assign them.
GCP.Compute.Instances.disks.typestringSpecifies the type of the disk, either SCRATCH or PERSISTENT. If not specified, the default is PERSISTENT.
GCP.Compute.Instances.disks.modestringThe mode in which to attach this disk, either READ_WRITE or READ_ONLY. If not specified, the default is to attach the disk in READ_WRITE mode.
GCP.Compute.Instances.disks.sourcestringSpecifies a valid partial or full URL to an existing Persistent Disk resource. When creating a new instance, one of initializeParams.sourceImage or disks.source is required except for local SSD.
GCP.Compute.Instances.disks.deviceNamestringSpecifies a unique device name of your choice that is reflected into the /dev/disk/by-id/google-* tree of a Linux operating system running within the instance. This name can be used to reference the device for mounting, resizing, and other operations from within the instance.
GCP.Compute.Instances.disks.indexnumberA zero-based index for this disk, where 0 is reserved for the boot disk. Each attached disk on an instance has a unique index number.
GCP.Compute.Instances.disks.bootbooleanIndicates that this is a boot disk. The VM uses the first partition of the disk as its root filesystem.
GCP.Compute.Instances.disks.initializeParamsstringSpecifies parameters for a new disk to be created with the instance. Use initialization parameters to create boot disks or local SSDs attached to the instance.
GCP.Compute.Instances.disks.autoDeletebooleanSpecifies whether the disk is auto-deleted when the instance is deleted (not when the disk is detached).
GCP.Compute.Instances.disks.licensesstringAny valid publicly visible licenses.
GCP.Compute.Instances.disks.interfacestringSpecifies the disk interface for attaching this disk, either SCSI or NVME. The default is SCSI. Persistent disks must use SCSI; attaching a persistent disk with any other interface will fail. Local SSDs can use either NVME or SCSI. For performance characteristics of SCSI versus NVMe, see Local SSD performance.
GCP.Compute.Instances.disks.guestOsFeaturesstringA list of features to enable on the guest operating system. Applicable only for bootable images. Read Enabling guest operating system features to see a list of available options.
GCP.Compute.Instances.disks.diskEncryptionKeyObjectEncrypts or decrypts a disk using a customer-supplied encryption key.
GCP.Compute.Instances.disks.kindstringType of the resource. Always compute#attachedDisk for attached disks.
GCP.Compute.Instances.metadatastringThe metadata key/value pairs assigned to the instance. This includes custom metadata and predefined keys.
GCP.Compute.Instances.metadata.fingerprintstringSpecifies a fingerprint for this request, which is a hash of the metadata contents used for optimistic locking. The fingerprint is generated by Compute Engine and changes after every metadata update. You must provide an up-to-date fingerprint to modify metadata; otherwise, the request fails with error 412 conditionNotMet.
GCP.Compute.Instances.metadata.itemsstringArray of key/value pairs. The total size of all keys and values must be less than 512 KB.
GCP.Compute.Instances.metadata.kindstringType of the resource. Always compute#metadata for metadata.
GCP.Compute.Instances.serviceAccountsstringA list of service accounts, with their specified scopes, authorized for the instance. Only one service account per VM instance is supported.
GCP.Compute.Instances.serviceAccounts.emailstringEmail address of the service account.
GCP.Compute.Instances.serviceAccounts.scopesstringThe list of scopes to be made available for this service account.
GCP.Compute.Instances.selfLinkstringServer-defined URL for the resource.
GCP.Compute.Instances.schedulingstringSets the scheduling options for the instance.
GCP.Compute.Instances.scheduling.onHostMaintenancestringDefines the maintenance behavior for this instance. For standard instances, the default behavior is MIGRATE. For preemptible instances, the default and only possible behavior is TERMINATE. For more information, see Setting Instance Scheduling Options.
GCP.Compute.Instances.scheduling.automaticRestartbooleanSpecifies whether the instance should be automatically restarted if it is terminated by Compute Engine (not terminated by a user). You can only set the automatic restart option for standard instances. Preemptible instances cannot be automatically restarted.
GCP.Compute.Instances.scheduling.preemptiblebooleanDefines whether the instance is preemptible. This can only be set during instance creation, it cannot be set or changed after the instance has been created.
GCP.Compute.Instances.scheduling.nodeAffinitiesstringA set of node affinity and anti-affinity.
GCP.Compute.Instances.cpuPlatformstringThe CPU platform used by the instance.
GCP.Compute.Instances.labelsstringLabels to apply to the instance. These can be later modified by the setLabels method.
GCP.Compute.Instances.labels.keystringThe label key.
GCP.Compute.Instances.labels.valuestringThe label value.
GCP.Compute.Instances.labelFingerprintstringA fingerprint for this request, which is essentially a hash of the labels contents and used for optimistic locking. The fingerprint is initially generated by Compute Engine and changes after every request to modify or update labels. You must always provide an up-to-date fingerprint hash in order to update or change labels.
GCP.Compute.Instances.minCpuPlatformstringSpecifies a minimum CPU platform for the VM instance. Applicable values are the friendly names of CPU platforms, such as minCpuPlatform: "Intel Haswell" or minCpuPlatform: "Intel Sandy Bridge".
GCP.Compute.Instances.guestAcceleratorsstringA list of the type and count of accelerator cards attached to the instance.
GCP.Compute.Instances.guestAccelerators.acceleratorTypestringFull or partial URL of the accelerator type resource to attach to this instance. For example: projects/my-project/zones/us-central1-c/acceleratorTypes/nvidia-tesla-p100. When creating an instance template, specify only the accelerator name.
GCP.Compute.Instances.guestAccelerators.acceleratorCountstringThe number of the guest accelerator cards exposed to the instance.
GCP.Compute.Instances.startRestrictedbooleanIndicates whether a VM has been restricted from starting because Compute Engine detected suspicious activity.
GCP.Compute.Instances.deletionProtectionbooleanWhether the resource should be protected against deletion.
GCP.Compute.Instances.hostnamestringHostname.
GCP.Compute.Instances.kindstringType of the resource. Always compute#instance for instances.

gcp-storage-bucket-list#


Retrieves the list of buckets in the project associated with the client.

Base Command#

gcp-storage-bucket-list

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
limitMaximum number of buckets to return.Optional
prefixFilter results to buckets whose names begin with this prefix.Optional
page_tokenToken for pagination.Optional

Context Output#

PathTypeDescription
GCP.Storage.Bucket.idStringThe unique identifier for the bucket.
GCP.Storage.Bucket.nameStringThe name of the bucket.
GCP.Storage.Bucket.kindStringThe type of resource (for example, storage#bucket).
GCP.Storage.Bucket.locationStringThe location of the bucket.
GCP.Storage.Bucket.locationTypeStringThe type of location (for example, multi-region).
GCP.Storage.Bucket.projectNumberStringThe GCP project number associated with the bucket.
GCP.Storage.Bucket.storageClassStringThe storage class of the bucket.
GCP.Storage.Bucket.rpoStringThe recovery point objective setting of the bucket.
GCP.Storage.Bucket.etagStringThe HTTP entity tag of the bucket.
GCP.Storage.Bucket.generationStringThe generation number of the bucket.
GCP.Storage.Bucket.metagenerationStringThe metageneration number of the bucket.
GCP.Storage.Bucket.timeCreatedDateThe time the bucket was created.
GCP.Storage.Bucket.timeUpdatedDateThe time the bucket was last updated.
GCP.Storage.Bucket.selfLinkStringThe link to the bucket resource on the GCP API.

Example#

!gcp-storage-bucket-list project_id="my-project" limit="10" prefix="logs-"

gcp-storage-bucket-get#


Retrieves information about a specific bucket.

Base Command#

gcp-storage-bucket-get

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
bucket_nameName of the bucket to retrieve.Required

Context Output#

PathTypeDescription
GCP.Storage.Bucket.idStringThe unique identifier for the bucket.
GCP.Storage.Bucket.nameStringThe name of the bucket.
GCP.Storage.Bucket.kindStringThe type of resource (for example, storage#bucket).
GCP.Storage.Bucket.locationStringThe location of the bucket.
GCP.Storage.Bucket.locationTypeStringThe type of location (for example, multi-region).
GCP.Storage.Bucket.projectNumberStringThe GCP project number associated with the bucket.
GCP.Storage.Bucket.storageClassStringThe storage class of the bucket.
GCP.Storage.Bucket.rpoStringThe recovery point objective setting of the bucket.
GCP.Storage.Bucket.etagStringThe HTTP entity tag of the bucket.
GCP.Storage.Bucket.generationStringThe generation number of the bucket.
GCP.Storage.Bucket.metagenerationStringThe metageneration number of the bucket.
GCP.Storage.Bucket.timeCreatedDateThe time the bucket was created.
GCP.Storage.Bucket.timeUpdatedDateThe time the bucket was last updated.
GCP.Storage.Bucket.selfLinkStringThe link to the bucket resource on the GCP API.

gcp-storage-bucket-objects-list#


Retrieves the list of objects in a bucket.

Base Command#

gcp-storage-bucket-objects-list

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
bucket_nameName of the bucket to list objects from.Required
prefixFilter results to objects whose names begin with this prefix.Optional
delimiterDelimiter to use for grouping objects. For example delimiter="/" Returns results in a directory-like mode, with / being a common value for the delimiter.Optional
limitMaximum number of objects to return.Optional
page_tokenToken for pagination.Optional

Context Output#

PathTypeDescription
GCP.Storage.BucketObject.idStringThe unique identifier for the object.
GCP.Storage.BucketObject.nameStringThe name of the object.
GCP.Storage.BucketObject.kindStringThe type of resource (for example, storage#object).
GCP.Storage.BucketObject.bucketStringThe name of the bucket containing the object.
GCP.Storage.BucketObject.contentTypeStringThe MIME type of the object.
GCP.Storage.BucketObject.sizeNumberThe size of the object in bytes.
GCP.Storage.BucketObject.crc32cStringThe CRC32C checksum of the object.
GCP.Storage.BucketObject.md5HashStringThe MD5 hash of the object.
GCP.Storage.BucketObject.etagStringThe HTTP entity tag of the object.
GCP.Storage.BucketObject.generationStringThe generation number of the object.
GCP.Storage.BucketObject.metagenerationStringThe metageneration number of the object.
GCP.Storage.BucketObject.storageClassStringThe storage class of the object.
GCP.Storage.BucketObject.mediaLinkStringThe link for downloading the object content.
GCP.Storage.BucketObject.selfLinkStringThe link to the object resource in the GCP API.
GCP.Storage.BucketObject.timeCreatedDateThe time when the object was created.
GCP.Storage.BucketObject.timeFinalizedDateThe time when the object was finalized.
GCP.Storage.BucketObject.timeStorageClassUpdatedDateThe time when the object's storage class was last updated.
GCP.Storage.BucketObject.updatedDateThe time when the object was last modified.

Example#

!gcp-storage-bucket-objects-list project_id="my-project" bucket_name="my-bucket" prefix="reports/" delimiter="/" limit="50"

gcp-storage-bucket-policy-list#


Retrieves the IAM policy for a bucket.

Base Command#

gcp-storage-bucket-policy-list

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
bucket_nameName of the bucket to retrieve IAM policy from.Required
requested_policy_versionThe IAM policy version to be returned. If the optionsRequestedPolicyVersion is for an older version that doesn't support part of the requested IAM policy, the request fails. Required to be 3 or greater for buckets with IAM Conditions.Optional

Context Output#

PathTypeDescription
GCP.Storage.BucketPolicy.versionNumberIAM policy version.
GCP.Storage.BucketPolicy.etagStringETag of the IAM policy.
GCP.Storage.BucketPolicy.bindingsListList of role bindings for the bucket.
GCP.Storage.BucketPolicy.resourceIdStringResource ID of the updated IAM policy. e.g. projects/_/buckets/BUCKET_NAME.

Example#

!gcp-storage-bucket-policy-list project_id="my-project" bucket_name="my-bucket" requested_policy_version="3"

gcp-storage-bucket-policy-set#


Sets the IAM policy for a bucket.

Base Command#

gcp-storage-bucket-policy-set

Usage#

  • add=false: Replaces the entire bucket IAM policy with the JSON provided in policy.
  • add=true: Reads the current bucket policy (getIamPolicy), merges the provided bindings per role (deduplicates members), and updates the bucket policy (setIamPolicy) while preserving other top-level fields.

Warning: Use this command with extreme caution. Running it without explicitly merging (i.e., with add=false) will overwrite the bucket's existing IAM policy with the provided policy. If you intend to keep current bindings and add new ones, use add=true.

Policy structure#

  • bindings: Array of binding objects. Each binding:
    • role: String. For example, roles/storage.objectViewer, roles/storage.admin.
    • members: Array of strings. Allowed formats:
      • user:<email> (e.g., user:alice@example.com)
      • group:<email>
      • serviceAccount:<email>
      • domain:<domain> (e.g., domain:example.com)
      • allUsers | allAuthenticatedUsers
  • version: Number. Required to be 3 or greater if any binding includes condition.
  • etag: String. Recommended for replace flow (add=false) to avoid overwriting concurrent updates.
  • Optional fields like kind, resourceId may appear in responses but are not required in requests.

Notes:

  • For add=true (merge), only a valid bindings array is required; other top-level fields are taken from the existing policy.
  • For add=false (replace), the provided object becomes the entire policy on the bucket.

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
bucket_nameName of the bucket to set IAM policy on.Required
policyJSON string representing the IAM policy to set.Required
addWhen true, merges the provided policy bindings into the current bucket policy (per role, deduplicating members) by first calling getIamPolicy and then setIamPolicy with the merged result. When false, replaces the entire policy with the provided JSON via setIamPolicy.
. Possible values are: true, false. Default is false.
Optional

Context Output#

PathTypeDescription
GCP.Storage.BucketPolicy.versionNumberIAM policy version after update.
GCP.Storage.BucketPolicy.etagStringETag of the updated IAM policy.
GCP.Storage.BucketPolicy.bindingsListList of role bindings for the bucket.

Examples#

  • Replace entire policy (add=false):

!gcp-storage-bucket-policy-set project_id="my-project" bucket_name="my-bucket-name" add="false" policy=`{"kind": "storage#policy", "resourceId": "projects/_/buckets/my-bucket-name", "version": 1, "etag": "CAY=", "bindings":[{"role":"roles/storage.objectViewer","members":["allUsers"]}]}`

  • Merge bindings into existing policy (add=true):

!gcp-storage-bucket-policy-set project_id="my-project" bucket_name="my-bucket-name" add="true" policy=`{"bindings":[{"role":"roles/storage.objectViewer","members":["user:alice@example.com"]}]}`

gcp-storage-bucket-object-policy-list#


Retrieves the IAM policy for a specific object in a bucket.

Base Command#

gcp-storage-bucket-object-policy-list

Note: If Uniform Bucket-Level Access (UBLA) is enabled on the bucket, object-level ACLs are not available. In that case, this command returns the bucket-level IAM policy under GCP.Storage.BucketObjectPolicy.

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
bucket_nameName of the bucket containing the object.Required
object_nameName of the object to retrieve IAM policy from.Required
generationGeneration of the object.Optional

Context Output#

PathTypeDescription
GCP.Storage.BucketObjectPolicy.bucketNameStringName of the bucket containing the object.
GCP.Storage.BucketObjectPolicy.objectNameStringName of the object.
GCP.Storage.BucketObjectPolicy.bindingsListList of role bindings for the object.

Example#

!gcp-storage-bucket-object-policy-list project_id="my-project" bucket_name="my-bucket" object_name="path/to/object.txt"

gcp-storage-bucket-object-policy-set#


Sets the IAM policy for a specific object in a bucket.

Base Command#

gcp-storage-bucket-object-policy-set

Note: If UBLA is enabled on the bucket, the command does not modify object ACLs and instead returns guidance to manage permissions via the bucket IAM policy.

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
bucket_nameName of the bucket containing the object.Required
object_nameName of the object to set IAM policy on.Required
policyJSON string representing the IAM policy to set.Required
generationGeneration of the object.Optional

Context Output#

PathTypeDescription
GCP.Storage.BucketObjectPolicy.versionNumberIAM policy version after update.
GCP.Storage.BucketObjectPolicy.etagStringETag of the updated IAM policy.
GCP.Storage.BucketObjectPolicy.bindingsUnknownList of role bindings for the object.

gcp-compute-firewall-insert#


Creates a new firewall rule in the specified project.

Base Command#

gcp-compute-firewall-insert

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
resource_nameName of the firewall rule to create.Required
descriptionAn optional description for the firewall rule.Optional
networkURL of the network, e.g., global/networks/default.Optional
priorityPriority 0-65535. Default 1000.Optional
directionDirection of traffic to which this firewall applies. Default INGRESS. Possible values are: INGRESS, EGRESS. Default is INGRESS.Optional
allowedALLOW rules in tuples, e.g., ipprotocol=tcp,ports=443;ipprotocol=tcp,ports=80.Optional
deniedDENY rules in tuples, e.g., ipprotocol=tcp,ports=22,443.Optional
source_rangesComma-separated CIDRs for INGRESS.Optional
destination_rangesComma-separated CIDRs for EGRESS.Optional
source_tagsComma-separated instance tags to match as source.Optional
target_tagsComma-separated tags to apply this rule to.Optional
source_service_accountsComma-separated service accounts for source.Optional
target_service_accountsComma-separated service accounts to target.Optional
log_config_enableEnable firewall logging. Possible values are: true, false.Optional
disabledWhether this firewall rule is disabled. Possible values are: true, false.Optional

Context Output#

PathTypeDescription
GCP.Compute.Operations.idStringUnique identifier for the operation resource, defined by the server.
GCP.Compute.Operations.nameStringName of the operation resource.
GCP.Compute.Operations.kindStringType of the resource, for example compute#operation.
GCP.Compute.Operations.operationTypeStringType of operation, such as insert, update, or delete.
GCP.Compute.Operations.statusStringCurrent status of the operation.
GCP.Compute.Operations.progressNumberProgress of the operation as a percentage between 0 and 100.
GCP.Compute.Operations.targetIdStringUnique target ID of the resource affected by the operation.
GCP.Compute.Operations.targetLinkStringURL of the target resource modified by the operation.
GCP.Compute.Operations.selfLinkStringServer-defined URL for the operation resource.
GCP.Compute.Operations.insertTimeDateThe time when the operation resource was created.
GCP.Compute.Operations.startTimeDateThe time when the operation started running.
GCP.Compute.Operations.userStringThe user account that performed the operation.

gcp-compute-firewall-list#


Lists firewall rules in the specified project.

Base Command#

gcp-compute-firewall-list

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
limitMaximum number of results to return. Acceptable values are 0 to 500, inclusive. Default is 50.Optional
page_tokenToken for pagination.Optional
filterA filter expression for resources listed in the response. The expression must specify a field name, a comparison operator (=, !=, >, or <), and a value, which can be a string, number, or boolean. For example, to exclude a Compute Engine instance named example-instance, use name != example-instance.
For more options and details, see:
https://cloud.google.com/compute/docs/reference/rest/v1/firewalls/list#:~:text=page%20of%20results.-,filter,-string.
Optional

Context Output#

PathTypeDescription
GCP.Compute.Firewall.idStringUnique identifier for the firewall rule.
GCP.Compute.Firewall.nameStringName of the firewall rule.
GCP.Compute.Firewall.kindStringType of the resource (for example, compute#firewall).
GCP.Compute.Firewall.descriptionStringDescription of the firewall rule.
GCP.Compute.Firewall.directionStringDirection of traffic for the rule (INGRESS or EGRESS).
GCP.Compute.Firewall.disabledBooleanIndicates whether the firewall rule is disabled.
GCP.Compute.Firewall.priorityNumberPriority value of the firewall rule.
GCP.Compute.Firewall.networkStringThe network URL this firewall rule applies to.
GCP.Compute.Firewall.selfLinkStringServer-defined URL for the resource.
GCP.Compute.Firewall.creationTimestampDateThe creation timestamp of the firewall rule.
GCP.Compute.Firewall.logConfig.enableBooleanIndicates whether logging is enabled for the firewall rule.
GCP.Compute.Firewall.sourceRangesUnknownList of source IP ranges that the rule applies to.
GCP.Compute.Firewall.targetTagsUnknownList of target instance tags to which the rule applies.
GCP.Compute.FirewallNextTokenStringNext page token for pagination.

gcp-compute-firewall-get#


Retrieves a specific firewall rule by name.

Base Command#

gcp-compute-firewall-get

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
resource_nameFirewall rule name.Required

Context Output#

PathTypeDescription
GCP.Compute.Firewall.namestringFirewall rule name.
GCP.Compute.Firewall.networkstringNetwork URL for the firewall rule.
GCP.Compute.Firewall.directionstringDirection of traffic (INGRESS/EGRESS).
GCP.Compute.Firewall.prioritynumberPriority of the rule.
GCP.Compute.Firewall.allowedUnknownAllowed tuples.
GCP.Compute.Firewall.deniedUnknownDenied tuples.
GCP.Compute.Firewall.targetTagsUnknownTarget instance tags.

gcp-compute-snapshots-list#


Lists snapshots in the specified project.

Base Command#

gcp-compute-snapshots-list

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
limitMaximum number of results to return. Acceptable values are 0 to 500, inclusive. Default is 50.Optional
page_tokenToken for pagination.Optional
filterA filter expression for resources listed in the response. The expression must specify a field name, a comparison operator (=, !=, >, or <), and a value, which can be a string, number, or boolean. For example, to exclude a Compute Engine instance named example-instance, use name != example-instance.
For more options and details, see:
https://cloud.google.com/compute/docs/reference/rest/v1/snapshots/list#:~:text=page%20of%20results.-,filter,-string.
Optional

Context Output#

PathTypeDescription
GCP.Compute.Snapshot.idStringUnique identifier for the snapshot resource.
GCP.Compute.Snapshot.nameStringName of the snapshot resource.
GCP.Compute.Snapshot.kindStringType of the resource, for example compute#snapshot.
GCP.Compute.Snapshot.statusStringCurrent status of the snapshot, such as READY or FAILED.
GCP.Compute.Snapshot.autoCreatedBooleanIndicates whether the snapshot was automatically created.
GCP.Compute.Snapshot.architectureStringCPU architecture of the source disk, for example X86_64.
GCP.Compute.Snapshot.creationTimestampDateThe time when the snapshot was created.
GCP.Compute.Snapshot.creationSizeBytesNumberTotal size of the snapshot in bytes at creation time.
GCP.Compute.Snapshot.diskSizeGbNumberSize of the snapshot in gigabytes.
GCP.Compute.Snapshot.downloadBytesNumberTotal bytes downloaded to create the snapshot.
GCP.Compute.Snapshot.enableConfidentialComputeBooleanIndicates if confidential compute is enabled for this snapshot.
GCP.Compute.Snapshot.labelFingerprintStringFingerprint for the labels applied to the snapshot.
GCP.Compute.Snapshot.licenseCodesUnknownList of license code identifiers attached to the snapshot.
GCP.Compute.Snapshot.licensesUnknownList of license URLs associated with the snapshot.
GCP.Compute.Snapshot.selfLinkStringServer-defined URL for the snapshot resource.
GCP.Compute.Snapshot.sourceDiskStringURL of the source disk used to create the snapshot.
GCP.Compute.Snapshot.sourceDiskIdStringUnique ID of the source disk used to create the snapshot.
GCP.Compute.Snapshot.sourceSnapshotSchedulePolicyStringURL of the snapshot schedule policy used to create this snapshot.
GCP.Compute.Snapshot.sourceSnapshotSchedulePolicyIdStringUnique ID of the snapshot schedule policy used to create this snapshot.
GCP.Compute.Snapshot.storageBytesNumberTotal storage size of the snapshot in bytes.
GCP.Compute.Snapshot.storageBytesStatusStringStatus of the storage bytes usage, for example UP_TO_DATE.
GCP.Compute.Snapshot.storageLocationsUnknownList of storage locations for the snapshot.
GCP.Compute.SnapshotNextTokenStringNext page token for pagination.

gcp-compute-snapshot-get#


Retrieves details for a specific snapshot.

Base Command#

gcp-compute-snapshot-get

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
resource_nameSnapshot name.Required

Context Output#

PathTypeDescription
GCP.Compute.Snapshot.idStringUnique identifier for the snapshot resource.
GCP.Compute.Snapshot.nameStringName of the snapshot resource.
GCP.Compute.Snapshot.kindStringType of the resource, for example compute#snapshot.
GCP.Compute.Snapshot.statusStringCurrent status of the snapshot, such as READY or FAILED.
GCP.Compute.Snapshot.autoCreatedBooleanIndicates whether the snapshot was automatically created.
GCP.Compute.Snapshot.architectureStringCPU architecture of the source disk, for example X86_64.
GCP.Compute.Snapshot.creationTimestampDateThe time when the snapshot was created.
GCP.Compute.Snapshot.creationSizeBytesNumberTotal size of the snapshot in bytes at creation time.
GCP.Compute.Snapshot.diskSizeGbNumberSize of the snapshot in gigabytes.
GCP.Compute.Snapshot.downloadBytesNumberTotal bytes downloaded to create the snapshot.
GCP.Compute.Snapshot.enableConfidentialComputeBooleanIndicates if confidential compute is enabled for this snapshot.
GCP.Compute.Snapshot.labelFingerprintStringFingerprint for the labels applied to the snapshot.
GCP.Compute.Snapshot.licenseCodesUnknownList of license code identifiers attached to the snapshot.
GCP.Compute.Snapshot.licensesUnknownList of license URLs associated with the snapshot.
GCP.Compute.Snapshot.selfLinkStringServer-defined URL for the snapshot resource.
GCP.Compute.Snapshot.sourceDiskStringURL of the source disk used to create the snapshot.
GCP.Compute.Snapshot.sourceDiskIdStringUnique ID of the source disk used to create the snapshot.
GCP.Compute.Snapshot.sourceSnapshotSchedulePolicyStringURL of the snapshot schedule policy used to create this snapshot.
GCP.Compute.Snapshot.sourceSnapshotSchedulePolicyIdStringUnique ID of the snapshot schedule policy used to create this snapshot.
GCP.Compute.Snapshot.storageBytesNumberTotal storage size of the snapshot in bytes.
GCP.Compute.Snapshot.storageBytesStatusStringStatus of the storage bytes usage, for example UP_TO_DATE.
GCP.Compute.Snapshot.storageLocationsUnknownList of storage locations for the snapshot.

gcp-compute-instances-aggregated-list-by-ip#


Aggregated list of instances across all zones; can be filtered by internal or external IP.

Base Command#

gcp-compute-instances-aggregated-list-by-ip

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
ip_addressThe IP address to search for.Required
match_externalIf true, match against external NAT IPs; otherwise internal NIC IPs. Possible values are: true, false.Optional
limitMaximum number of results to return. Acceptable values are 0 to 500, inclusive. Default is 50.Optional
page_tokenToken for pagination.Optional

Context Output#

PathTypeDescription
GCP.Compute.Instance.namestringInstance name.
GCP.Compute.Instance.idstringInstance ID.
GCP.Compute.Instance.zonestringInstance zone URL.
GCP.Compute.Instance.statusstringInstance status.
GCP.Compute.Instance.networkInterfacesUnknownNetwork interfaces of the instance.

gcp-compute-network-tag-set#


Adds a network tag to a VM instance (merges with existing tags).

Base Command#

gcp-compute-network-tag-set

Input#

Argument NameDescriptionRequired
project_idGCP project ID.Required
zoneZone of the VM (e.g., us-central1-a).Required
resource_nameInstance name.Required
tagTag to add.Required
tags_fingerprintFingerprint of the previous set of tags for this resource, used to prevent conflicts. Provide the latest fingerprint value when making a request to add or change tags. To retrieve the fingerprint use the command gcp-compute-instance-get.Required
add_tagIf true, adds the tag to the existing tags; otherwise, overrides them. The default is true. Possible values are: true, false. Default is true.Optional

Context Output#

PathTypeDescription
GCP.Compute.Operations.idstringOperation ID.
GCP.Compute.Operations.namestringOperation name.
GCP.Compute.Operations.statusstringCurrent operation status (e.g., RUNNING, DONE).
GCP.Compute.Operations.operationTypestringType of operation being performed.
GCP.Compute.Operations.progressnumberOperation progress percentage (0-100).
GCP.Compute.Operations.userstringUser or service account that initiated the operation.
GCP.Compute.Operations.targetLinkstringFull URL of the target resource for this operation.
GCP.Compute.Operations.targetIdstringTarget resource ID.
GCP.Compute.Operations.zonestringZone where the operation is performed.
GCP.Compute.Operations.insertTimestringTime when the operation was inserted.
GCP.Compute.Operations.startTimestringTime when the operation started.
GCP.Compute.Operations.selfLinkstringURL for this operation resource.
GCP.Compute.Operations.kindstringType of the resource (e.g., compute#operation).

gcp-compute-image-get#


Returns the specified image. Gets a list of available images by making a list() request.

Base Command#

gcp-compute-image-get

Input#
Argument NameDescriptionRequired
project_idProject ID for this request. if left empty configured project will be used.Optional
imageName of the image resource to return.Required
Context Output#
PathTypeDescription
GCP.Compute.Images.idstringThe unique identifier for the resource. This identifier is defined by the server.
GCP.Compute.Images.creationTimestampstringCreation timestamp in RFC3339 text format.
GCP.Compute.Images.namestringName of the resource; provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
GCP.Compute.Images.descriptionstringAn optional description of this resource.
GCP.Compute.Images.sourceTypestringThe type of the image used to create this disk. The default and only value is RAW
GCP.Compute.Images.rawDiskstringThe parameters of the raw disk image.
GCP.Compute.Images.rawDisk.sourcestringThe full Google Cloud Storage URL where the disk image is stored. You must provide either this property or the sourceDisk property but not both.
GCP.Compute.Images.rawDisk.sha1ChecksumstringAn optional SHA1 checksum of the disk image before unpackaging provided by the client when the disk image is created.
GCP.Compute.Images.rawDisk.containerTypestringThe format used to encode and transmit the block device, which should be TAR. This is just a container and transmission format and not a runtime format. Provided by the client when the disk image is created.
GCP.Compute.Images.deprecatedstringThe deprecation status associated with this image.
GCP.Compute.Images.deprecated.statestringThe deprecation state of this resource. This can be ACTIVE DEPRECATED, OBSOLETE, or DELETED. Operations which communicate the end of life date for an image, can use ACTIVE. Operations which create a new resource using a DEPRECATED resource will return successfully, but with a warning indicating the deprecated resource and recommending its replacement. Operations which use OBSOLETE or DELETED resources will be rejected and result in an error.
GCP.Compute.Images.deprecated.replacementstringThe URL of the suggested replacement for a deprecated resource. The suggested replacement resource must be the same kind of resource as the deprecated resource.
GCP.Compute.Images.deprecated.deprecatedstringAn optional RFC3339 timestamp on or after which the state of this resource is intended to change to DEPRECATED. This is only informational and the status will not change unless the client explicitly changes it.
GCP.Compute.Images.deprecated.obsoletestringAn optional RFC3339 timestamp on or after which the state of this resource is intended to change to OBSOLETE. This is only informational and the status will not change unless the client explicitly changes it.
GCP.Compute.Images.deprecated.deletedstringAn optional RFC3339 timestamp on or after which the state of this resource is intended to change to DELETED. This is only informational and the status will not change unless the client explicitly changes it.
GCP.Compute.Images.statusstringThe status of the image. An image can be used to create other resources, such as instances, only after the image has been successfully created and the status is set to READY. Possible values are FAILED, PENDING, or READY.
GCP.Compute.Images.archiveSizeBytesstringSize of the image tar.gz archive stored in Google Cloud Storage (in bytes).
GCP.Compute.Images.diskSizeGbstringSize of the image when restored onto a persistent disk (in GB).
GCP.Compute.Images.sourceDiskstringURL of the source disk used to create this image. This can be a full or valid partial URL. You must provide either this property or the rawDisk.source property but not both to create an image. For example, the following are valid values: https://www.googleapis.com/compute/v1/projects/project/zones/zone/disks/disk , projects/project/zones/zone/disks/disk , zones/zone/disks/disk
GCP.Compute.Images.sourceDiskIdstringThe ID value of the disk used to create this image. This value may be used to determine whether the image was taken from the current or a previous instance of a given disk name.
GCP.Compute.Images.licensesstringAny applicable license URI.
GCP.Compute.Images.familystringThe name of the image family to which this image belongs. You can create disks by specifying an image family instead of a specific image name. The image family always returns its latest image that is not deprecated. The name of the image family must comply with RFC1035.
GCP.Compute.Images.imageEncryptionKeystringEncrypts the image using a customer-supplied encryption key. After you encrypt an image with a customer-supplied key, you must provide the same key if you use the image later (e.g. to create a disk from the image). Customer-supplied encryption keys do not protect access to metadata of the disk. If you do not provide an encryption key when creating the image, then the disk will be encrypted using an automatically generated key and you do not need to provide a key to use the image later.
GCP.Compute.Images.imageEncryptionKey.rawKeystringSpecifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
GCP.Compute.Images.imageEncryptionKey.kmsKeyNamestringThe name of the encryption key that is stored in Google Cloud KMS.
GCP.Compute.Images.imageEncryptionKey.sha256stringThe RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
GCP.Compute.Images.sourceDiskEncryptionKeystringThe customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key.
GCP.Compute.Images.sourceDiskEncryptionKey.rawKeystringSpecifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
GCP.Compute.Images.sourceDiskEncryptionKey.kmsKeyNamestringThe name of the encryption key that is stored in Google Cloud KMS.
GCP.Compute.Images.sourceDiskEncryptionKey.sha256stringThe RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
GCP.Compute.Images.selfLinkstringServer-defined URL for the resource.
GCP.Compute.Images.labelsstringLabels to apply to this image. These can be later modified by the setLabels method.
GCP.Compute.Images.labelFingerprintstringA fingerprint for the labels being applied to this image, which is essentially a hash of the labels used for optimistic locking. The fingerprint is initially generated by Compute Engine and changes after every request to modify or update labels. You must always provide an up-to-date fingerprint hash in order to update or change labels, otherwise the request will fail with error 412 conditionNotMet.
GCP.Compute.Images.guestOsFeaturesstringA list of features to enable on the guest operating system. Applicable only for bootable images. Read Enabling guest operating system features to see a list of available options.
GCP.Compute.Images.guestOsFeatures.typestringThe ID of a supported feature. Read Enabling guest operating system features to see a list of available options.
GCP.Compute.Images.licenseCodesstringInteger license codes indicating which licenses are attached to this image.
GCP.Compute.Images.sourceImagestringURL of the source image used to create this image. This can be a full or valid partial URL.
GCP.Compute.Images.sourceImageIdstringThe ID value of the image used to create this image. This value may be used to determine whether the image was taken from the current or a previous instance of a given image name.
GCP.Compute.Images.sourceImageEncryptionKeystringThe customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key.
GCP.Compute.Images.sourceImageEncryptionKey.rawKeystringSpecifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
GCP.Compute.Images.sourceImageEncryptionKey.kmsKeyNamestringThe name of the encryption key that is stored in Google Cloud KMS.
GCP.Compute.Images.sourceImageEncryptionKey.sha256stringThe RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
GCP.Compute.Images.sourceSnapshotstringURL of the source snapshot used to create this image. This can be a full or valid partial URL.
GCP.Compute.Images.sourceSnapshotIdstringThe ID value of the snapshot used to create this image. This value may be used to determine whether the snapshot was taken from the current or a previous instance of a given snapshot name.
GCP.Compute.Images.sourceSnapshotEncryptionKeystringThe customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key.
GCP.Compute.Images.sourceSnapshotEncryptionKey.rawKeystringSpecifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource.
GCP.Compute.Images.sourceSnapshotEncryptionKey.kmsKeyNamestringThe name of the encryption key that is stored in Google Cloud KMS.
GCP.Compute.Images.sourceSnapshotEncryptionKey.sha256stringThe RFC 4648 base64 encoded SHA-256 hash of the customer-supplied encryption key that protects this resource.
GCP.Compute.Images.kindstringType of the resource. Always compute#image for images.

gcp-compute-instance-group-get#


Returns the specified instance group. Gets a list of available instance groups by making a list() request.

Base Command#

gcp-compute-instance-group-get

Input#
Argument NameDescriptionRequired
instance_groupThe name of the instance group.Required
project_idGCP project ID.Required
zoneThe name of the zone where the instance group is located.Required
Context Output#
PathTypeDescription
GCP.Compute.InstanceGroups.idstringThe unique identifier for the resource. This identifier is defined by the server.
GCP.Compute.InstanceGroups.creationTimestampstringThe creation timestamp for this instance group in RFC3339 text format.
GCP.Compute.InstanceGroups.namestringThe name of the instance group. The name must be 1-63 characters long, and comply with RFC1035.
GCP.Compute.InstanceGroups.descriptionstringAn optional description of this resource.
GCP.Compute.InstanceGroups.namedPortsstringAssigns a name to a port number.
GCP.Compute.InstanceGroups.namedPorts.namestringThe name for this named port. The name must be 1-63 characters long, and comply with RFC1035.
GCP.Compute.InstanceGroups.namedPorts.portstringThe port number, which can be a value between 1 and 42.
GCP.Compute.InstanceGroups.networkstringThe URL of the network to which all instances in the instance group belong.
GCP.Compute.InstanceGroups.fingerprintstringThe fingerprint of the named ports. The system uses this fingerprint to detect conflicts when multiple users change the named ports concurrently.
GCP.Compute.InstanceGroups.zonestringThe URL of the zone where the instance group is located (for zonal resources).
GCP.Compute.InstanceGroups.selfLinkstringThe URL for this instance group. The server generates this URL.
GCP.Compute.InstanceGroups.sizestringThe total number of instances in the instance group.
GCP.Compute.InstanceGroups.regionstringThe URL of the region where the instance group is located (for regional resources).
GCP.Compute.InstanceGroups.subnetworkstringThe URL of the subnetwork to which all instances in the instance group belong
GCP.Compute.InstanceGroups.kindstringThe resource type, which is always compute#instanceGroup for instance groups.

gcp-compute-region-get#


Returns the specified Region resource. Gets a list of available regions by making a list() request.

Base Command#

gcp-compute-region-get

Input#
Argument NameDescriptionRequired
project_idGCP project ID.Required
regionName of the region resource to return.Required
Context Output#
PathTypeDescription
GCP.Compute.Regions.idstringThe unique identifier for the resource. This identifier is defined by the server.
GCP.Compute.Regions.creationTimestampstringCreation timestamp in RFC3339 text format.
GCP.Compute.Regions.namestringName of the resource.
GCP.Compute.Regions.descriptionstringTextual description of the resource.
GCP.Compute.Regions.statusstringStatus of the region, either UP or DOWN.
GCP.Compute.Regions.zonesstringA list of zones available in this region, in the form of resource URLs.
GCP.Compute.Regions.quotasstringQuotas assigned to this region.
GCP.Compute.Regions.quotas.metricstringName of the quota metric.
GCP.Compute.Regions.quotas.limitstringQuota limit for this metric.
GCP.Compute.Regions.quotas.usagestringCurrent usage of this metric.
GCP.Compute.Regions.quotas.ownerstringOwning resource. This is the resource on which this quota is applied.
GCP.Compute.Regions.deprecatedstringThe deprecation status associated with this region.
GCP.Compute.Regions.deprecated.statestringThe deprecation state of this resource. This can be ACTIVE DEPRECATED, OBSOLETE, or DELETED. Operations which communicate the end of life date for an image, can use ACTIVE. Operations which create a new resource using a DEPRECATED resource will return successfully, but with a warning indicating the deprecated resource and recommending its replacement. Operations which use OBSOLETE or DELETED resources will be rejected and result in an error.
GCP.Compute.Regions.deprecated.replacementstringThe URL of the suggested replacement for a deprecated resource. The suggested replacement resource must be the same kind of resource as the deprecated resource.
GCP.Compute.Regions.deprecated.deprecatedstringAn optional RFC3339 timestamp on or after which the state of this resource is intended to change to DEPRECATED. This is only informational and the status will not change unless the client explicitly changes it.
GCP.Compute.Regions.deprecated.obsoletestringAn optional RFC3339 timestamp on or after which the state of this resource is intended to change to OBSOLETE. This is only informational and the status will not change unless the client explicitly changes it.
GCP.Compute.Regions.deprecated.deletedstringAn optional RFC3339 timestamp on or after which the state of this resource is intended to change to DELETED. This is only informational and the status will not change unless the client explicitly changes it.
GCP.Compute.Regions.selfLinkstringServer-defined URL for the resource.
GCP.Compute.Regions.kindstringType of the resource. Always compute#region for regions.

gcp-compute-zone-get#


Returns the specified Zone resource. Gets a list of available zones by making a list() request.

Base Command#

gcp-compute-zone-get

Input#
Argument NameDescriptionRequired
project_idGCP project ID.Required
zoneName of the zone resource to return.Required
Context Output#
PathTypeDescription
GCP.Compute.Zones.idstringThe unique identifier for the resource. This identifier is defined by the server.
GCP.Compute.Zones.creationTimestampstringCreation timestamp in RFC3339 text format.
GCP.Compute.Zones.namestringName of the resource.
GCP.Compute.Zones.descriptionstringTextual description of the resource.
GCP.Compute.Zones.statusstringStatus of the zone, either UP or DOWN.
GCP.Compute.Zones.deprecatedstringThe deprecation status associated with this zone.
GCP.Compute.Zones.deprecated.statestringThe deprecation state of this resource. This can be ACTIVE DEPRECATED, OBSOLETE, or DELETED. Operations which communicate the end of life date for an image, can use ACTIVE. Operations which create a new resource using a DEPRECATED resource will return successfully, but with a warning indicating the deprecated resource and recommending its replacement. Operations which use OBSOLETE or DELETED resources will be rejected and result in an error.
GCP.Compute.Zones.deprecated.replacementstringThe URL of the suggested replacement for a deprecated resource. The suggested replacement resource must be the same kind of resource as the deprecated resource.
GCP.Compute.Zones.deprecated.deprecatedstringAn optional RFC3339 timestamp on or after which the state of this resource is intended to change to DEPRECATED. This is only informational and the status will not change unless the client explicitly changes it.
GCP.Compute.Zones.deprecated.obsoletestringAn optional RFC3339 timestamp on or after which the state of this resource is intended to change to OBSOLETE. This is only informational and the status will not change unless the client explicitly changes it.
GCP.Compute.Zones.deprecated.deletedstringAn optional RFC3339 timestamp on or after which the state of this resource is intended to change to DELETED. This is only informational and the status will not change unless the client explicitly changes it.
GCP.Compute.Zones.regionstringFull URL reference to the region which hosts the zone.
GCP.Compute.Zones.selfLinkstringServer-defined URL for the resource.
GCP.Compute.Zones.availableCpuPlatformsstringAvailable cpu/platform selections for the zone. Do not use field = 7 or field = 11. Next available field = 14.
GCP.Compute.Zones.kindstringType of the resource. Always compute#zone for zones.

gcp-compute-networks-list#


Retrieves the list of networks available to the specified project.

Base Command#

gcp-compute-networks-list

Input#
Argument NameDescriptionRequired
project_idGCP project ID.Required
limitThe maximum number of results per page that should be returned. If the number of available results is larger than maxResults, Compute Engine returns a nextPageToken that can be used to get the next page of results in subsequent list requests. Acceptable values are 0 to 50, inclusive. (Default: 50)Optional
filtersA filter expression that filters resources listed in the response. The expression must specify the field name, a comparison operator, and the value that you want to use for filtering. The value must be a string, a number, or a boolean. The comparison operator must be either =, !=, >, or <. For example, if you are filtering Compute Engine instances, you can exclude instances named example-instance by specifying name != example-instance.Optional
order_bySorts list results by a certain order. By default, results are returned in alphanumerical order based on the resource name. You can also sort results in descending order based on the creation timestamp using orderBy="creationTimestamp desc". This sorts results based on the creationTimestamp field in reverse chronological order (newest result first). Use this to sort resources like operations so that the newest operation is returned first.Optional
page_tokenSpecifies a page token to use. Set pageToken to the nextPageToken returned by a previous list request to get the next page of results.Optional
Context Output#
PathTypeDescription
GCP.Compute.Networks.idstringThe unique identifier for the resource. This identifier is defined by the server.
GCP.Compute.Networks.creationTimestampstringCreation timestamp in RFC3339 text format.
GCP.Compute.Networks.namestringName of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
GCP.Compute.Networks.descriptionstringAn optional description of this resource.
GCP.Compute.Networks.gatewayIPv4stringThe gateway address for default routing out of the network. This value is read only and is selected by GCP.
GCP.Compute.Networks.selfLinkstringServer-defined URL for the resource.
GCP.Compute.Networks.autoCreateSubnetworksbooleanWhen set to true, the VPC network is created in "auto" mode. When set to false, the VPC network is created in "custom" mode.
GCP.Compute.Networks.subnetworksstringServer-defined fully-qualified URLs for all subnetworks in this VPC network.
GCP.Compute.Networks.peeringsstringA list of network peerings for the resource.
GCP.Compute.Networks.peerings.namestringName of this peering. Provided by the client when the peering is created. The name must comply with RFC1035. Specifically, the name must be 1-63 characters long and match regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all the following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
GCP.Compute.Networks.peerings.networkstringThe URL of the peer network. It can be either full URL or partial URL. The peer network may belong to a different project. If the partial URL does not contain project, it is assumed that the peer network is in the same project as the current network.
GCP.Compute.Networks.peerings.statestringState for the peering.
GCP.Compute.Networks.peerings.stateDetailsstringDetails about the current state of the peering.
GCP.Compute.Networks.peerings.autoCreateRoutesbooleanThis field will be deprecated soon. Prefer using exchangeSubnetRoutes instead. Indicates whether full mesh connectivity is created and managed automatically. When it is set to true, Google Compute Engine will automatically create and manage the routes between two networks when the state is ACTIVE. Otherwise, user needs to create routes manually to route packets to peer network.
GCP.Compute.Networks.peerings.exchangeSubnetRoutesbooleanWhether full mesh connectivity is created and managed automatically. When it is set to true, Google Compute Engine will automatically create and manage the routes between two networks when the peering state is ACTIVE. Otherwise, user needs to create routes manually to route packets to peer network.
GCP.Compute.Networks.routingConfigstringThe network-level routing configuration for this network. Used by Cloud Router to determine what type of network-wide routing behavior to enforce.
GCP.Compute.Networks.routingConfig.routingModestringThe network-wide routing mode to use. If set to REGIONAL, this networks cloud routers will only advertise routes with subnets of this network in the same region as the router. If set to GLOBAL, this networks cloud routers will advertise routes with all subnets of this network, across regions.
GCP.Compute.Networks.kindstringType of the resource. Always compute#network for networks.

gcp-compute-network-insert#


Creates a network in the specified project using the data included in the request.

Base Command#

gcp-compute-network-insert

Input#
Argument NameDescriptionRequired
nameName of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.Required
project_idGCP project ID.Required
descriptionAn optional description of this resource.Optional
auto_create_sub_networksWhen set to true, the VPC network is created in "auto" mode. When set to false, the VPC network is created in "custom" mode. An auto mode VPC network starts with one subnet per region. Each subnet has a predetermined range as described in Auto mode VPC network IP ranges.Optional
routing_config_routing_modeThe network-wide routing mode to use. If set to REGIONAL, this network's cloud routers will only advertise routes with subnets of this network in the same region as the router. If set to GLOBAL, this network's cloud routers will advertise routes with all subnets of this network, across regions.Optional
Context Output#
PathTypeDescription
GCP.Compute.Operations.idstringThe unique identifier for the resource. This identifier is defined by the server.
GCP.Compute.Operations.namestringName of the resource.
GCP.Compute.Operations.zonestringThe URL of the zone where the operation resides. Only available when performing per-zone operations. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body.
GCP.Compute.Operations.clientOperationIdstringThe value of requestId if you provided it in the request. Not present otherwise.
GCP.Compute.Operations.operationTypestringThe type of operation, such as insert, update, or delete, and so on.
GCP.Compute.Operations.targetLinkstringThe URL of the resource that the operation modifies. For operations related to creating a snapshot, this points to the persistent disk that the snapshot was created from.
GCP.Compute.Operations.targetIdstringThe unique target ID, which identifies a specific incarnation of the target resource
GCP.Compute.Operations.statusstringThe status of the operation, which can be one of the following: PENDING RUNNING or DONE
GCP.Compute.Operations.statusMessagestringAn optional textual description of the current status of the operation.
GCP.Compute.Operations.userstringUser who requested the operation for example EMAILADDRESS.
GCP.Compute.Operations.progressnumberAn optional progress indicator that ranges from 0 to 100. There is no requirement that this be linear or support any granularity of operations. This should not be used to guess when the operation will be complete. This number should monotonically increase as the operation progresses.
GCP.Compute.Operations.insertTimestringThe time that this operation was requested. This value is in RFC3339 text format.
GCP.Compute.Operations.startTimestringThe time that this operation was started by the server. This value is in RFC3339 text format.
GCP.Compute.Operations.endTimestringThe time that this operation was completed. This value is in RFC3339 text format.
GCP.Compute.Operations.errorstringIf errors are generated during processing of the operation, this field will be populated.
GCP.Compute.Operations.error.errorsstringThe array of errors encountered while processing this operation.
GCP.Compute.Operations.warningsstringIf warning messages are generated during processing of the operation, this field will be populated.
GCP.Compute.Operations.warnings.codestringA warning code, if applicable. For example, Compute Engine returns NO_RESULTS_ON_PAGE if there are no results in the response.
GCP.Compute.Operations.warnings.messagestringA human-readable description of the warning code.
GCP.Compute.Operations.warnings.datastringMetadata about this warning in key: value format.
GCP.Compute.Operations.httpErrorStatusCodenumberIf the operation fails, this field contains the HTTP error status code that was returned. For example, a 404 means the resource was not found.
GCP.Compute.Operations.httpErrorMessagestringIf the operation fails, this field contains the HTTP error message that was returned, such as NOT FOUND.
GCP.Compute.Operations.selfLinkstringServer-defined URL for the resource.
GCP.Compute.Operations.regionstringThe URL of the region where the operation resides. Only available when performing regional operations. You must specify this field as part of the HTTP request URL. It is not settable as a field in the request body.
GCP.Compute.Operations.descriptionstringA textual description of the operation, which is set when the operation is created.
GCP.Compute.Operations.kindstringType of the resource. Always compute#operation for Operation resources.

gcp-compute-network-get#


Returns the specified network.

Base Command#

gcp-compute-network-get

Input#
Argument NameDescriptionRequired
project_idGCP project ID.Required
networkName of the network to return.Required
Context Output#
PathTypeDescription
GCP.Compute.Networks.idstringThe unique identifier for the resource. This identifier is defined by the server.
GCP.Compute.Networks.creationTimestampstringCreation timestamp in RFC3339 text format.
GCP.Compute.Networks.namestringName of the resource. Provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
GCP.Compute.Networks.descriptionstringAn optional description of this resource.
GCP.Compute.Networks.gatewayIPv4stringThe gateway address for default routing out of the network. This value is read only and is selected by GCP.
GCP.Compute.Networks.selfLinkstringServer-defined URL for the resource.
GCP.Compute.Networks.autoCreateSubnetworksbooleanWhen set to true, the VPC network is created in "auto" mode. When set to false, the VPC network is created in "custom" mode.
GCP.Compute.Networks.subnetworksstringServer-defined fully-qualified URLs for all subnetworks in this VPC network.
GCP.Compute.Networks.peeringsstringA list of network peerings for the resource.
GCP.Compute.Networks.peerings.namestringName of this peering. Provided by the client when the peering is created. The name must comply with RFC1035. Specifically, the name must be 1-63 characters long and match regular expression [a-z]([-a-z0-9]*[a-z0-9])? which means the first character must be a lowercase letter, and all the following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.
GCP.Compute.Networks.peerings.networkstringThe URL of the peer network. It can be either full URL or partial URL. The peer network may belong to a different project. If the partial URL does not contain project, it is assumed that the peer network is in the same project as the current network.
GCP.Compute.Networks.peerings.statestringState for the peering.
GCP.Compute.Networks.peerings.stateDetailsstringDetails about the current state of the peering.
GCP.Compute.Networks.peerings.autoCreateRoutesbooleanThis field will be deprecated soon. Prefer using exchangeSubnetRoutes instead. Indicates whether full mesh connectivity is created and managed automatically. When it is set to true, Google Compute Engine will automatically create and manage the routes between two networks when the state is ACTIVE. Otherwise, user needs to create routes manually to route packets to peer network.
GCP.Compute.Networks.peerings.exchangeSubnetRoutesbooleanWhether full mesh connectivity is created and managed automatically. When it is set to true, Google Compute Engine will automatically create and manage the routes between two networks when the peering state is ACTIVE. Otherwise, user needs to create routes manually to route packets to peer network.
GCP.Compute.Networks.routingConfigstringThe network-level routing configuration for this network. Used by Cloud Router to determine what type of network-wide routing behavior to enforce.
GCP.Compute.Networks.routingConfig.routingModestringThe network-wide routing mode to use. If set to REGIONAL, this networks cloud routers will only advertise routes with subnets of this network in the same region as the router. If set to GLOBAL, this networks cloud routers will advertise routes with all subnets of this network, across regions.
GCP.Compute.Networks.kindstringType of the resource. Always compute#network for networks.