Routing Logs outside of GCP
Use Case – To Route GCP Logs to external sinks (e.g. Splunk) The only sink you can use here is pub sub. Install the logging agent to capture…
Archive
Category: GCP Operational
BigQuery Billing Exports
Daily usage and cost estimates – can be exported – on a daily basis , to BigQuery. Billing in GCP Billing costs can be exported to BigQuery for…
stackdriver alerts – Alerting on resource non compliance in GCP
Stackdriver alerts Cloud Monitoring (aka Stackdriver) makes it possible to create custom metrics. This ‘metric’ doesn’t just have to be something like CPU, RAM and other well known…
Finding resources in GCP using gCloud
To quickly find all resources within a project or even a parent org, we can use asset manager and resource manager API in GCP. Passing in a Project…
Moving Projects and Billing Accounts under an Organization
It is common to end up with projects that are NOT under a specific org. Same for the billing for those projects. In order to move them under…
Helpful gCloud Commands
At the Org Level – LIST all Enabled Org Policies gcloud beta resource-manager org-policies list –organization=blah blah > allpolicies.txt IAM Bindings at the org level gcloud organizations get-iam-policy…
get iam policy – your gcloud friend
Anytime someone asks you – Can you show me all the administrators for this GCP org? Can you show me who are the project owners for these projects?…
Palo Alto CSPM (Prisma) on GCP, AWS, Azure – demo links
There is no excerpt because this is a protected post.
gcloud behind a corporate proxy
If you are using gcloud from behind a corporate firewall/proxy, you may encounter an SSL validation error. To disable SSL validation for google-cloud-sdk $ gcloud config set auth/disable_ssl_validation…