gcloud compute

Create and manipulate Compute Engine resources

Subcommands

NameDescription
accelerator-typesRead Compute Engine accelerator types
addressesRead and manipulate Compute Engine addresses
backend-bucketsRead and manipulate backend buckets
backend-servicesList, create, and delete backend services
commitmentsManage Compute Engine commitments
config-sshPopulate SSH config files with Host entries from each instance
connect-to-serial-portConnect to the serial port of an instance
copy-files*(DEPRECATED)* Copy files to and from Google Compute Engine virtual machines via scp
diagnoseDebugging tools for Compute Engine virtual machine instances
disk-typesRead Compute Engine virtual disk types
disksRead and manipulate Compute Engine disks
external-vpn-gatewaysList, create, delete and update External VPN Gateways
firewall-rulesList, create, update, and delete Compute Engine firewall rules
forwarding-rulesRead and manipulate traffic forwarding rules to network load balancers
health-checksRead and manipulate health checks for load balanced instances
http-health-checksRead and manipulate HTTP health checks for load balanced instances
https-health-checksRead and manipulate HTTPS health checks for load balanced instances
imagesList, create, and delete Compute Engine images
instance-groupsRead and manipulate Compute Engine instance groups
instance-templatesRead and manipulate Compute Engine instances templates
instancesRead and manipulate Compute Engine virtual machine instances
interconnectsRead and manipulate Compute Engine interconnects
machine-typesRead Compute Engine virtual machine types
network-endpoint-groupsRead and manipulate Compute Engine network endpoint groups
networksList, create, and delete Compute Engine networks
operationsRead and manipulate Compute Engine operations
os-configManage OS Config tasks for Compute Engine VM instances
os-loginCreate and manipulate Compute Engine OS Login resources
packet-mirroringsManage Compute Engine packet mirroring resources
project-infoRead and manipulate project-level data like quotas and metadata
regionsList Compute Engine regions
reservationsManage Compute Engine reservations
reset-windows-passwordReset and return a password for a Windows machine instance
resource-policiesManage Compute Engine Resource Policies
routersList, create, and delete Compute Engine routers
routesRead and manipulate routes
scpCopy files to and from Google Compute Engine virtual machines via scp
security-policiesRead and manipulate Cloud Armor security policies
shared-vpcConfigure shared VPC
sign-urlSign specified URL for use with Cloud CDN Signed URLs
snapshotsList, describe, and delete Compute Engine snapshots
sole-tenancyRead and manage Compute Engine sole-tenancy resources
sshSSH into a virtual machine instance
ssl-certificatesList, create, and delete Compute Engine SSL certificates
ssl-policiesList, create, delete and update Compute Engine SSL policies
start-iap-tunnelStarts an IAP TCP forwarding tunnel
target-grpc-proxiesManage Compute Engine target gRPC proxy resources
target-http-proxiesList, create, and delete target HTTP proxies
target-https-proxiesList, create, and delete target HTTPS proxies
target-instancesRead and manipulate Compute Engine virtual target instances
target-poolsControl Compute Engine target pools for network load balancing
target-ssl-proxiesList, create, and delete target SSL proxies
target-tcp-proxiesList, create, and delete target TCP proxies
target-vpn-gatewaysRead and manipulate classic VPN gateways
tpusList, create, and delete Cloud TPUs
url-mapsList, create, and delete URL maps
vpn-gatewaysRead and manipulate Highly Available VPN Gateways
vpn-tunnelsRead and manipulate Compute Engine VPN tunnels
zonesList Compute Engine zones

Options

NameDescription
--account <ACCOUNT>Google Cloud Platform user account to use for invocation. Overrides the default *core/account* property value for this command invocation
--billing-project <BILLING_PROJECT>The Google Cloud Platform project that will be charged quota for operations performed in gcloud. If you need to operate on one project, but need quota against a different project, you can use this flag to specify the billing project. If both `billing/quota_project` and `--billing-project` are specified, `--billing-project` takes precedence. Run `$ gcloud config set --help` to see more information about `billing/quota_project`
--configuration <CONFIGURATION>The configuration to use for this command invocation. For more information on how to use configurations, run: `gcloud topic configurations`. You can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment variable to set the equivalent of this flag for a terminal session
--flags-file <YAML_FILE>A YAML or JSON file that specifies a *--flag*:*value* dictionary. Useful for specifying complex flag values with special characters that work with any command interpreter. Additionally, each *--flags-file* arg is replaced by its constituent flags. See $ gcloud topic flags-file for more information
--flatten <KEY>Flatten _name_[] output resource slices in _KEY_ into separate records for each item in each slice. Multiple keys and slices may be specified. This also flattens keys for *--format* and *--filter*. For example, *--flatten=abc.def* flattens *abc.def[].ghi* references to *abc.def.ghi*. A resource record containing *abc.def[]* with N elements will expand to N records in the flattened output. This flag interacts with other flags that are applied in this order: *--flatten*, *--sort-by*, *--filter*, *--limit*
--format <FORMAT>Set the format for printing command output resources. The default is a command-specific human-friendly output format. The supported formats are: `config`, `csv`, `default`, `diff`, `disable`, `flattened`, `get`, `json`, `list`, `multi`, `none`, `object`, `table`, `text`, `value`, `yaml`. For more details run $ gcloud topic formats
--helpDisplay detailed help
--impersonate-service-account <SERVICE_ACCOUNT_EMAIL>For this gcloud invocation, all API requests will be made as the given service account instead of the currently selected account. This is done without needing to create, download, and activate a key for the account. In order to perform operations as the service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account. The roles/iam.serviceAccountTokenCreator role has this permission or you may create a custom role. Overrides the default *auth/impersonate_service_account* property value for this command invocation
--log-httpLog all HTTP server requests and responses to stderr. Overrides the default *core/log_http* property value for this command invocation
--project <PROJECT_ID>The Google Cloud Platform project ID to use for this invocation. If omitted, then the current project is assumed; the current project can be listed using `gcloud config list --format='text(core.project)'` and can be set using `gcloud config set project PROJECTID`. + `--project` and its fallback `core/project` property play two roles in the invocation. It specifies the project of the resource to operate on. It also specifies the project for API enablement check, quota, and billing. To specify a different project for quota and billing, use `--billing-project` or `billing/quota_project` property
--quietDisable all interactive prompts when running gcloud commands. If input is required, defaults will be used, or an error will be raised. Overrides the default core/disable_prompts property value for this command invocation. This is equivalent to setting the environment variable `CLOUDSDK_CORE_DISABLE_PROMPTS` to 1
--trace-token <TRACE_TOKEN>Token used to route traces of service requests for investigation of issues. Overrides the default *core/trace_token* property value for this command invocation
--user-output-enabledPrint user intended output to the console. Overrides the default *core/user_output_enabled* property value for this command invocation. Use *--no-user-output-enabled* to disable
--verbosity <VERBOSITY>Override the default verbosity for this command. Overrides the default *core/verbosity* property value for this command invocation. _VERBOSITY_ must be one of: *debug*, *info*, *warning*, *error*, *critical*, *none*