>_ gcloud CLI cheat sheet 2026

Create a Docker repository in Artifact Registry

Configure Docker to authenticate with Artifact Registry in a given region

Create a GKE Autopilot cluster

SSH to a Compute Engine instance through Identity-Aware Proxy without a public IP

Open an IAP TCP tunnel to port 22 on a Compute Engine instance for SSH forwarding

List all Docker images stored in an Artifact Registry repository

Map a custom domain to a Cloud Run service

Create a Cloud Deploy release from the current directory

Create a Workload Identity Federation pool for authenticating external workloads

Create an OIDC provider in a Workload Identity Federation pool

Export the Binary Authorization policy to a YAML file

List all packages in an Artifact Registry repository

List all rollouts for a Cloud Deploy release

Split Cloud Run traffic 90/10 between two revisions for a canary rollout

Add a tag to a specific version of a package in Artifact Registry

Add a BGP peer to a Cloud Router for a VPN or Interconnect attachment

Retrieve the serial port output from a Compute Engine instance for boot-time debugging

Display configuration details for a Cloud Run job

Update a Cloud Run job to use a new container image

List all Cloud Run jobs in a given region

Deploy the current directory's application to Google App Engine

Open the deployed App Engine application URL in your default browser

Stream live log entries from the deployed App Engine application

Display metadata about the current App Engine application including region and URL

List all deployed versions of the App Engine application and their traffic allocation

List all services deployed in the App Engine application

Show details and traffic splits for a specific App Engine service

Show details of a specific App Engine version within a service

Delete a specific App Engine version that is not receiving traffic

Stop serving traffic to a specific App Engine version

Start a previously stopped App Engine version to resume serving traffic

List all regions where App Engine applications can be created

Deploy an App Engine app with a specific version identifier

Route 100% of App Engine traffic to a specific version

List all running instances of the App Engine application

Show details of a specific App Engine instance

Force-stop and delete a specific App Engine instance

Read recent log entries from the App Engine application

List all App Engine operations and their completion status

Deploy a new App Engine version without shifting traffic to it

Authorize gcloud to access Google Cloud using your user account credentials

List all credentialed accounts and identify the currently active account

Print an OAuth2 access token for the active account to use in API requests

Authenticate gcloud using a service account JSON key file

Set up Application Default Credentials for local development libraries and tools

Revoke credentials and remove access for a specific account from gcloud

Register gcloud as a Docker credential helper for Google Container Registry

Print an OpenID Connect identity token for the active account

Print an access token generated from Application Default Credentials

Revoke Application Default Credentials stored on the local machine

Set the quota project used by Application Default Credentials

Authenticate with gcloud without automatically opening a browser window

Switch the active gcloud account without re-authenticating

Revoke credentials for all accounts logged into gcloud

Configure Docker to authenticate with a regional Artifact Registry

Activate a service account by specifying both email and key file path

Configure gcloud to impersonate a service account for all commands

List credentialed accounts filtered to a specific account email

Authenticate gcloud using a credential configuration file

Display OAuth2 token details for a specific credentialed account

List all datasets in the current BigQuery project

Create a new BigQuery dataset

Display schema and metadata for a BigQuery table

Run a BigQuery query using standard SQL (GoogleSQL)

Load a CSV file from Cloud Storage into a BigQuery table using a schema file

Export a BigQuery table to a CSV file in Cloud Storage

Delete a BigQuery table without prompting for confirmation

Display the first rows of a BigQuery table

Copy a BigQuery table to a new destination table

Create a BigQuery table with an explicit schema file

Estimate the bytes processed by a BigQuery query without running it

Run a BigQuery query and write the results to a destination table

Load newline-delimited JSON data from Cloud Storage into BigQuery

Create a BigQuery view with a standard SQL query

Create a BigQuery dataset in a specific region such as the EU

Export a BigQuery table to compressed CSV files in Cloud Storage

Run a BigQuery query that fails if it would process more than 1 GB of data

Set a 30-day expiry on a BigQuery table (value in seconds)

Load Parquet files from Cloud Storage into BigQuery with schema autodetection

Create a BigQuery table partitioned by day using a schema file

Create a Cloud Build trigger on a Cloud Source Repository branch

List recent Cloud Build jobs for the current project

Show detailed information about a specific Cloud Build job

Cancel an in-progress Cloud Build job

Submit the current directory as a Cloud Build job and tag the resulting container image

Submit a Cloud Build job using a custom build configuration file

Stream or display the log output for a specific Cloud Build run

List all Cloud Build triggers configured in the current project

Show full configuration details of a specific Cloud Build trigger

Delete a Cloud Build trigger by its ID

Manually execute a Cloud Build trigger against a specific branch

Create a Cloud Build trigger that fires on pushes to a GitHub repository

Temporarily disable a Cloud Build trigger without deleting it

Re-enable a previously paused Cloud Build trigger

Create a Cloud Build trigger by importing its YAML configuration file

Export a Cloud Build trigger configuration to a YAML file

Build a container image from source using Cloud Buildpacks without a Dockerfile

List only failed Cloud Build runs in the current project

Run a Cloud Build without uploading any local source code

List all private worker pools configured for Cloud Build

Deploy a new or updated Cloud Function with an HTTP trigger

List all deployed Cloud Functions in the current project

Show details and configuration of a specific Cloud Function

Delete a deployed Cloud Function from the project

Deploy an HTTP Cloud Function that requires authentication

Deploy a Cloud Function that is triggered by a Pub/Sub topic

Invoke a deployed Cloud Function directly with test data

Display recent log output from a deployed Cloud Function

Deploy a Cloud Function specifying a custom entry point handler name

Deploy a Cloud Function and set environment variables for it

Deploy a Cloud Function with a specific memory allocation

Deploy a Cloud Function with a custom maximum execution timeout

Allow unauthenticated public access to an HTTP Cloud Function

Retrieve the IAM policy controlling who can invoke a Cloud Function

Deploy a publicly accessible HTTP Cloud Function with no auth required

Deploy a Cloud Function connected to a VPC network via a connector

List all event types that can trigger a Cloud Function

Deploy a second-generation Cloud Function with the specified runtime and region

Deploy a Cloud Function using a specific service account identity

Update a single environment variable on a deployed Cloud Function without redeploying code

Split Cloud Run traffic between two revisions for a canary rollout

Deploy a container to Cloud Run with public access enabled

List all Cloud Run services in the current project

Show detailed configuration and status of a Cloud Run service

Delete a Cloud Run service and all its revisions

Deploy a container image to Cloud Run in a specific region

Deploy a container image to Cloud Run as a new or updated service

List all revisions of a Cloud Run service

Show configuration and status of a specific Cloud Run revision

Delete a specific Cloud Run revision that is not serving traffic

Route 100% of Cloud Run traffic to the latest deployed revision

Split Cloud Run traffic evenly between two revisions for canary testing

Allow unauthenticated public access to a Cloud Run service

Retrieve the IAM policy for a Cloud Run service

Update environment variables on a deployed Cloud Run service

Update the memory limit for a deployed Cloud Run service

Set the maximum number of concurrent requests per Cloud Run container instance

Create a Cloud Run Job for running containerised batch tasks

Trigger an execution of a Cloud Run Job

Set a minimum number of Cloud Run instances to keep warm and avoid cold starts

Create a Cloud Scheduler HTTP job with OIDC authentication targeting Cloud Run

List all Cloud Scheduler jobs in the current project

Show detailed configuration of a specific Cloud Scheduler job

Delete a Cloud Scheduler job permanently

Pause a Cloud Scheduler job so it stops triggering on its schedule

Manually trigger a Cloud Scheduler job immediately outside its normal schedule

Create a Cloud Scheduler job that sends HTTP requests on a cron schedule

Create a Cloud Scheduler job that publishes a message to a Pub/Sub topic

Create a Cloud Scheduler job that calls an App Engine endpoint

Update the cron schedule of an existing Cloud Scheduler HTTP job

Resume a previously paused Cloud Scheduler job

List all Cloud Scheduler jobs in a specific region

List only currently enabled Cloud Scheduler jobs in a region

Delete a Cloud Scheduler job without an interactive confirmation prompt

Create a Cloud Scheduler job that authenticates to an OIDC-protected endpoint

Export a Cloud Scheduler job configuration as YAML

Add or update HTTP headers on an existing Cloud Scheduler HTTP job

Manually trigger an immediate execution of a Cloud Scheduler job

List all regions where Cloud Scheduler is available

Create a Cloud Scheduler job that publishes to Pub/Sub every Monday at 9am

Create a Cloud SQL read replica using --master-instance-name

List all Cloud SQL instances in the current project

Show detailed information about a specific Cloud SQL instance

Delete a Cloud SQL instance and all its data permanently

List all databases within a specific Cloud SQL instance

Open an interactive SQL session to a Cloud SQL instance

Create a new database inside an existing Cloud SQL instance

Delete a database from a Cloud SQL instance

Show details and collation settings of a Cloud SQL database

Create a new database user in a Cloud SQL instance

List all database users in a Cloud SQL instance

Delete a database user from a Cloud SQL instance

Set database engine flags on a Cloud SQL instance

Configure the automated backup start time for a Cloud SQL instance

Change the machine type (tier) of a Cloud SQL instance

Restart a Cloud SQL instance to apply pending flag changes

Create an exact copy of a Cloud SQL instance

List all available automated and on-demand backups for a Cloud SQL instance

Export a Cloud SQL database to a SQL dump file in Cloud Storage

Import a SQL dump file from Cloud Storage into a Cloud SQL instance

Copy files or objects between your local filesystem and Cloud Storage

List objects and prefixes inside a Cloud Storage bucket

Create a new Cloud Storage bucket in a specified location

Delete objects or buckets from Cloud Storage

List all Cloud Storage buckets in the current project

Show detailed metadata and configuration for a specific Cloud Storage bucket

Move or rename an object within Cloud Storage

Print the contents of a Cloud Storage object to stdout

Show metadata such as size, hash, and content type for a Cloud Storage object

Recursively copy a local directory and all its contents to Cloud Storage

Enable object versioning on a Cloud Storage bucket

Apply a lifecycle management policy to a Cloud Storage bucket from a JSON file

Make all objects in a Cloud Storage bucket publicly readable

Retrieve the IAM policy for a Cloud Storage bucket

List Cloud Storage objects with their sizes and last-modified timestamps

Synchronise a local directory to Cloud Storage, copying only changed files

Enable uniform bucket-level access to disable per-object ACLs

Download an object from Cloud Storage to the local filesystem

Delete an empty Cloud Storage bucket

Set a retention policy to prevent object deletion for a specified period

Create a new Cloud Storage bucket

List all Cloud Storage buckets accessible in the current project

Upload a local file to a Cloud Storage bucket

Download a file from Cloud Storage to the current directory

Delete an object from a Cloud Storage bucket

Rename or move an object within Cloud Storage

Remove an empty Cloud Storage bucket

Print the contents of a Cloud Storage object to stdout

Display the total size of a Cloud Storage bucket in human-readable format

Display metadata for a specific Cloud Storage object

Recursively upload an entire local directory to Cloud Storage

Synchronise a local directory with a Cloud Storage bucket, copying only changed files

Upload a directory to Cloud Storage using parallel multi-threaded transfers

Enable object versioning on a Cloud Storage bucket

Apply a lifecycle configuration file to a Cloud Storage bucket

Grant a user the Storage Object Viewer role on a Cloud Storage bucket

Apply a CORS configuration file to a Cloud Storage bucket

Generate a signed URL valid for 1 hour for a private Cloud Storage object

Set a 365-day retention policy on a Cloud Storage bucket

Copy CSV files to Cloud Storage, skipping any files that already exist at the destination

Display the API server endpoint addresses and cluster services URLs

Show the client and server Kubernetes version information

Display the merged kubeconfig settings from all configured files

Print the name of the currently active kubeconfig context

List all available kubeconfig contexts and highlight the active one

Switch the active kubeconfig context to a different cluster or user

Modify a kubeconfig context to set its default namespace or cluster

Rename a kubectl context in the kubeconfig file

Remove a context entry from the kubeconfig file

Add or update a cluster entry in the kubeconfig with its API server URL

Set the credentials for a user entry in the kubeconfig file

Remove a cluster entry from the kubeconfig file

Show only the kubeconfig entries relevant to the current context

Dump detailed cluster diagnostic information for debugging

Display only the kubectl client version without contacting the server

List all cluster names defined in the kubeconfig file

Display the full kubeconfig including unredacted certificate data

Remove a user entry from the kubeconfig file

List only the Kubernetes resource types that are scoped to a namespace

Set the default namespace for the current kubectl context so you don't need -n on every command

Create a new Compute Engine virtual machine instance

List all Compute Engine VM instances in the current project

Show detailed metadata and configuration of a specific VM instance

Permanently delete a Compute Engine VM instance and its boot disk

Start a previously stopped Compute Engine VM instance

Stop a running Compute Engine VM instance without deleting it

Open an SSH connection to a Compute Engine VM instance

Perform a hard reset on a Compute Engine VM instance (equivalent to power cycle)

List all available Compute Engine zones and their status

Create a new persistent disk in a specified zone

Create a new VPC firewall rule to allow or deny specific traffic

List all VPC firewall rules in the current project

Reserve a new static external IP address in a specified region

Add network tags to a Compute Engine instance for firewall rule targeting

Securely copy files between a local machine and a Compute Engine instance over SSH

List all available Compute Engine disk images including public and custom images

Delete a VM from the wrong zone, update the default zone, and recreate it

Create a new Compute Engine disk from an existing snapshot

Create a snapshot of a Compute Engine persistent disk

List all available Compute Engine machine types in a specific zone

Initialize the gcloud CLI with a new configuration, project, and default settings

Set the active GCP project for all subsequent gcloud commands

Set the default Compute Engine region for the current configuration

Set the default Compute Engine zone for the current configuration

Display all properties in the active gcloud configuration

Create a new named gcloud configuration profile

Switch to a different named gcloud configuration profile

List all available gcloud configuration profiles and show which is active

List all GCP projects accessible with the active account credentials

Print the currently active GCP project from the gcloud configuration

Print the currently configured default Compute Engine region

Print the currently configured default Compute Engine zone

Remove a property from the active gcloud configuration so it has no default

Display diagnostic info about the gcloud installation, environment, and logs

Display the installed version of the gcloud CLI and all components

List all installed and available gcloud components with their versions

Update all installed gcloud SDK components to their latest versions

Show all properties set in a specific named gcloud configuration

Permanently delete a named gcloud configuration profile

Set which Google account is active in the current gcloud configuration

Create a ConfigMap from literal key-value pairs on the command line

List all ConfigMaps in the current namespace

Show the stored data and metadata of a specific ConfigMap

Create an opaque Secret from literal key-value pairs for sensitive data

List all Secrets and their types in the current namespace

Show metadata and data key sizes of a specific Secret without revealing values

Create a ConfigMap populated with the contents of a file on disk

Create a TLS Secret from a certificate and private key file pair

List all Kubernetes service accounts in the current namespace

Delete a ConfigMap from the current namespace

Open a ConfigMap for in-place editing in the default editor

Create a ConfigMap from a single key-value literal pair

Create a Kubernetes secret for authenticating with a private container registry

Delete a secret from the current namespace

Open a Kubernetes secret for in-place editing (values are base64-encoded)

Extract and decode a specific key from a Kubernetes secret

Create a ConfigMap by importing all key-value pairs from a .env file

Create a secret with a specific key mapped to a file's contents

List all ConfigMaps across every namespace in the cluster

Update a specific key in a ConfigMap using a JSON patch

List cluster events sorted by creation time to troubleshoot recent issues

Retrieve logs from the previous terminated instance of a pod container

Stream live log output from a pod container in real time

Attach to the primary process running inside a pod container for live interaction

Retrieve logs from a specific container within a multi-container pod

Block until a pod reaches a specified condition or the timeout expires

List cluster events sorted chronologically to diagnose recent failures

Attach a debug container to a running pod for live troubleshooting

Show CPU and memory usage broken down per container within a specific pod

Launch a temporary BusyBox pod for network or DNS debugging, auto-deleted on exit

Output the full pod specification and current status as YAML

Extract the conditions array from a pod to inspect readiness and scheduling state

Describe a ReplicaSet to diagnose pod scheduling or image pull failures

Read the serial port output from a Compute Engine VM to diagnose boot failures

Read error and critical log entries from the past hour across all services

Query Cloud Logging for Kubernetes container logs from a GKE cluster

Show events and routing rules for an ingress to debug traffic routing issues

Show pod logs from only the last hour to narrow down a recent error

Open an interactive shell session inside a running pod container

Check whether the current user has permission to create pods in a namespace

Update an existing Deployment Manager deployment with a revised config file

List all Deployment Manager deployments in the current project

Show detailed information about a specific Deployment Manager deployment

Create a new Deployment Manager deployment from a YAML config file

Delete an existing Deployment Manager deployment and all its managed resources

Update an existing Deployment Manager deployment with a revised config file

List Deployment Manager deployments filtered by operation type

List all resource types available for use in Deployment Manager configurations

List all individual resources created by a Deployment Manager deployment

Show details and current state of a specific resource in a Deployment Manager deployment

Preview a Deployment Manager deployment without actually creating resources

Update an existing Deployment Manager deployment with a new configuration file

Cancel a Deployment Manager deployment that is in preview state

List all manifests (config snapshots) for a Deployment Manager deployment

Show the expanded configuration snapshot for a specific Deployment Manager manifest

List all Deployment Manager operations and their current status

Show detailed status and error information for a Deployment Manager operation

Stop an in-progress Deployment Manager deployment operation

Remove a Deployment Manager deployment record without deleting the underlying resources

List all Deployment Manager deployments and output as JSON for scripting

Create a new deployment with a single replica of the specified image

List all deployments and their ready replica counts in the current namespace

Show detailed state, strategy, and events for a specific deployment

Delete a deployment and all of its managed replica sets and pods

Scale the number of pod replicas in a deployment to a specified count

Update the container image of a deployment to trigger a rolling update

Watch the progress of a rolling update for a deployment until completion

Roll back a deployment to its previous revision

Trigger a rolling restart of all pods in a deployment without changing the spec

View the revision history and change causes for a deployment

List all replica sets and their desired, current, and ready pod counts

Apply a partial modification to a deployment using a JSON or YAML patch

Create a Horizontal Pod Autoscaler to automatically scale a deployment based on CPU usage

List all Horizontal Pod Autoscalers and their current scaling metrics

Validate a deployment manifest locally without sending it to the cluster

Export a deployment's full specification as YAML for inspection or backup

Pause a deployment rollout to safely stage multiple changes

Resume a paused deployment rollout to continue the update

List pods matching a specific label selector to verify a deployment's pods

Set or update an environment variable on all containers in a deployment

Create a new Google Kubernetes Engine cluster with specified node count

List all GKE clusters in the current project across all zones

Delete a GKE cluster and all its associated resources

Fetch kubeconfig credentials to enable kubectl access to a GKE cluster

Resize the number of nodes in a GKE cluster node pool

Add a new node pool to an existing GKE cluster

List all node pools belonging to a specific GKE cluster

Update a GKE cluster configuration such as enabling node autoscaling

Stream live logs from a Deployment by referencing the Deployment object directly

Update a Deployment's container memory limit using kubectl set resources

Upgrade a specific GKE node pool to a newer Kubernetes version

Enable cluster autoscaling on a GKE node pool with min/max node bounds

Roll back a Kubernetes deployment to its previous revision

Scale a Kubernetes deployment to a specific replica count and verify

Create a ConfigMap from a file and inject it as environment variables into a deployment

Configure GKE Workload Identity: bind IAM policy and annotate the Kubernetes service account

Show detailed configuration and status of a GKE cluster

Remove a node pool from a GKE cluster and drain its nodes

Show configuration details of a specific GKE node pool

List all GKE operations in a zone to monitor cluster creation or upgrade progress

Create a custom IAM role from a YAML definition file

List all custom IAM roles defined in a specific project

Show the permissions and metadata for a specific IAM role

Create a custom IAM role in a project from a YAML permissions file

Add one or more permissions to an existing custom IAM role in a project

Copy an existing IAM role to create a new custom role in a destination project

Revoke a specific IAM role from a member on a project

Replace the entire IAM policy on a project with a policy defined in a JSON file

List only the custom IAM roles defined within a specific project

Add a new permission to an existing custom IAM role

Disable a custom IAM role so it cannot be granted to new members

Restore a previously deleted custom IAM role within the undelete window

Retrieve the IAM policy for a resource hierarchy folder

Retrieve the IAM policy for a GCP organization

Grant an IAM role to a member at the folder level

View the IAM policy that controls who can act as or impersonate a service account

Grant workload identity access so a Kubernetes SA can impersonate a Google SA

Search across all IAM policies in a project to find specific role grants

Create a custom IAM role from a YAML or JSON role definition file

Delete a custom IAM role from a project (can be undeleted within 7 days)

Create a new IAM service account in the current project

List all service accounts in the current project

Generate and download a new JSON key file for a service account

Grant an IAM role to a member on a specific project

Retrieve the full IAM policy (all role bindings) for a project

List all predefined and custom IAM roles available in the project

Delete a service account and revoke all its associated credentials

Show details including display name and unique ID for a service account

Update the display name of an existing service account

Disable a service account to prevent it from authenticating without deleting it

Re-enable a previously disabled service account

List all key IDs and their creation times for a service account

Revoke and delete a specific service account key by its ID

Allow a user to impersonate and act as a service account

Grant a service account the Storage Admin role on a project

View all IAM bindings on a service account resource itself

Remove a specific IAM role from a service account on a project

Sign a binary blob using a service account to produce a cryptographic signature

Create a service account with a description in an explicitly specified project

Generate a P12 format service account key for legacy authentication libraries

Create a Role that allows getting and listing pods in the current namespace

Create a ClusterRole that allows reading secrets across all namespaces

Bind a Role to a user so that user gains those permissions in the current namespace

Bind a ClusterRole to a user, granting those permissions across the entire cluster

Apply a NetworkPolicy manifest from a file to restrict pod-to-pod traffic

List all CustomResourceDefinitions installed in the cluster

Create a service account in a specific namespace

List all RoleBindings across every namespace in the cluster

Check whether user bob can delete deployments in the staging namespace

Check whether the current user has all permissions on all resources cluster-wide

Create a Role in the prod namespace that allows full ConfigMap management

Grant a service account view access by binding a ClusterRole via a RoleBinding

Install a CustomResourceDefinition into the cluster from a YAML manifest

List all instances of a custom resource by its kind name

Display the full spec and events for a NetworkPolicy in the prod namespace

Apply RBAC roles and bindings from a file, updating any that have changed

Show the API documentation for the NetworkPolicy spec field

Check whether the current user can list secrets in the kube-system namespace

List all NetworkPolicy resources across every namespace in the cluster

List all ClusterRoles defined in the cluster

Create a new Cloud SQL database instance with specified version and tier

Create a new Pub/Sub topic for publishing messages

Create a new Pub/Sub subscription attached to an existing topic

Read and display log entries from Cloud Logging with an optional filter

List all cryptographic keys in a Cloud KMS keyring

Enable a Google Cloud API or service for the current project

List all APIs and services currently enabled in the project

Submit a build to Cloud Build and push the resulting image to Container Registry

Create a new GCP project with a specified ID and display name

Schedule a GCP project for deletion after a 30-day recovery window

Show metadata including project number, labels, and lifecycle state for a project

List all Cloud Billing accounts accessible to the current user

Attach a billing account to a GCP project to enable paid services

Disable an API service on the current project

Create a new Secret Manager secret and set its initial value from a file

Read and output the latest version of a Secret Manager secret

List all secrets stored in Secret Manager for the current project

List all Cloud KMS key rings in a specific region

List only the APIs currently enabled on the active project

Create a new Cloud KMS symmetric encryption key in a key ring

List all namespaces in the cluster and their status

Create a new namespace to isolate resources within the cluster

Delete a namespace and all resources contained within it

List all pods within a specific namespace using the -n flag

Show detailed information about a Kubernetes namespace including resource quotas and limits

Set the default namespace for the current kubectl context so you don't need -n on every command

Export a namespace definition as YAML

List all workloads, services, and other resources within a namespace

Delete all deployments, pods, services and other resources within a namespace

Create a ResourceQuota to limit total resource consumption within a namespace

Show all resource quotas and their current usage in a namespace

Show current consumption versus limits for a specific resource quota

List LimitRange policies that set default and maximum resource limits in a namespace

List all recent events in a specific namespace to diagnose resource issues

Check whether a specific user has permission to list pods in a namespace

Add a label to a namespace, commonly used for network policy targeting

Apply a manifest file into a specific namespace

List all service accounts in a specific namespace

Apply a LimitRange manifest to set default CPU and memory limits in a namespace

List all pods across every namespace in the cluster

Create bidirectional VPC Network Peering between two projects

List all VPC networks in the current project

Show detailed information about a specific VPC network

Create a new VPC network with custom subnet mode for fine-grained subnet control

List all VPC firewall rules in the current project

Create a firewall rule to allow TCP traffic on a specific port within a VPC network

List all subnets across all VPC networks in the current project

Create a new subnet within a VPC network with a specified IP range

Show detailed configuration of a subnet including its CIDR range and secondary ranges

Delete a VPC network after removing all its resources

Update an existing VPC firewall rule to change allowed protocols or ports

Delete a VPC firewall rule from the current project

Show the full configuration of a specific VPC firewall rule

List all static IP addresses reserved in the current project

Show the IP address value and status of a reserved static address

Release a reserved static IP address back to the shared pool

List all VPC routes in the current project

List all load balancer forwarding rules in the current project

List all backend services configured for load balancing

Expand the IP range of an existing subnet to a larger CIDR prefix

List all nodes in the cluster with their status and Kubernetes version

Show detailed information including capacity, conditions, and allocated resources for a node

Mark a node as unschedulable to prevent new pods from being assigned to it

Mark a previously cordoned node as schedulable again to accept new pods

Safely evict all pods from a node in preparation for maintenance

Apply a taint to a node to repel pods that do not tolerate the taint

Display CPU and memory usage metrics for all nodes in the cluster

Add or update a label on a node for scheduling constraints and selection

List all nodes with extended details including internal IP, OS image, and container runtime

List all cluster nodes with their full set of labels

Remove a label from a node by appending a dash to the key name

Remove a taint from a node by appending a dash to the key name

Export a node's full specification including conditions and allocatable resources as YAML

Show node CPU and memory usage sorted by highest CPU consumption

Filter the node list to only nodes matching a specific label selector

Extract the allocatable CPU and memory resources from a specific node

Remove a node object from the cluster (after draining it first)

Extract the kubelet version from every node to verify upgrade status

Add or update an annotation on a node

Mark a node as unschedulable using a JSON patch without draining it

Create a Cloud Logging sink to export audit logs to Cloud Storage

Write a log entry to a named Cloud Logging log for testing or manual audit purposes

List all available log names in the current project

List all log sinks configured to export logs to external destinations

List all log-based metrics defined in the current project

List all Cloud Monitoring dashboards in the current project

Create a log sink to export matching log entries to Cloud Storage, BigQuery, or Pub/Sub

Delete a log export sink from the current project

Show the destination and filter configuration for a log sink

Create a log-based metric to count or extract values from matching log entries

Delete a log-based metric from the current project

List log buckets available for storing log data in a region

List all Cloud Monitoring alerting policies in the current project

List all notification channels configured for Cloud Monitoring alerts

Query Cloud Logging for error-level logs from Compute Engine instances

Read Cloud Audit Logs for admin activity in the current project

List all log views available for a specific log bucket

Show the full widget configuration of a Cloud Monitoring dashboard

Update the log filter on an existing log export sink

List recent error events from Cloud Error Reporting for a specific service

List all pods in the current namespace

List all pods across every namespace in the cluster

Show detailed information including events and conditions for a specific pod

Delete a specific pod from the current namespace

Open an interactive shell session inside a running pod container

Print the stdout logs from a specific pod container

Forward a local port to a port on a specific pod for debugging access

Copy files between a pod container and the local filesystem

Display CPU and memory usage metrics for pods in the current namespace

Create and run a single pod with the specified container image

List all pods along with their associated label key-value pairs

List pods with additional details including node name and IP address

Filter and list pods matching a specific label selector

Output the full YAML specification of a specific pod resource

Add or update an annotation on a specific pod resource

Add or update a label on a specific pod for selection and organization

List pods sorted by their start time to identify the most recently started pods

Force-restart all pods in a namespace by deleting them (deployments recreate them)

Block until a pod reaches the Ready state or the timeout expires

Extract the container image names for all pods in the current namespace

Grant a service account the Pub/Sub Publisher role on a specific topic

List all Pub/Sub topics in the current project

Delete a Pub/Sub topic and detach all its subscriptions

List all Pub/Sub subscriptions in the current project

Pull and acknowledge pending messages from a Pub/Sub subscription

Publish a message string to a Pub/Sub topic from the command line

Show configuration including ack deadline and push endpoint for a Pub/Sub subscription

Delete a Pub/Sub subscription and stop message delivery

Extend the acknowledgement deadline for an in-flight Pub/Sub message

Rewind or fast-forward a Pub/Sub subscription to a specific timestamp

Show configuration and associated subscriptions for a Pub/Sub topic

Create a Pub/Sub snapshot to preserve the current message backlog for a subscription

List all Pub/Sub snapshots in the current project

Create a Pub/Sub subscription with a custom acknowledgement deadline of 60 seconds

Create a push subscription that delivers messages to an HTTPS endpoint

Pull and automatically acknowledge up to 10 messages from a Pub/Sub subscription

Allow anyone to publish messages to a Pub/Sub topic without authentication

Acknowledge a specific Pub/Sub message by its ack ID to prevent redelivery

Update the HTTPS push endpoint URL on an existing push subscription

List all Pub/Sub topics in JSON format for scripting or automation

Apply a YAML or JSON resource configuration file to create or update resources

Create resources from a YAML or JSON file, failing if they already exist

Delete all resources defined in a YAML or JSON configuration file

Show differences between the live resource state and a local configuration file

List all common resource types (pods, services, deployments, etc.) in the current namespace

List all supported resource types, their short names, and API groups in the cluster

List all available API group versions supported by the cluster

Display the schema and documentation fields for a Kubernetes resource type

List all persistent volumes in the cluster and their bound status

List all persistent volume claims and their binding status in the current namespace

List all batch jobs and their completion status in the current namespace

List all CronJobs and their schedules in the current namespace

List all DaemonSets and their desired and available pod counts

List all StatefulSets and their ready replica counts in the current namespace

List all network policies controlling traffic flow between pods

Replace an existing Kubernetes resource with the definition in a file

List all workloads, services and core resources across every namespace

Create a resource and save its configuration as an annotation for future apply operations

Apply all manifests in a directory and delete labelled resources not present in the directory

Validate a manifest against the live API server without creating the resource

List all services and their cluster IPs and ports in the current namespace

Create a service to expose a deployment's pods to network traffic

Show detailed information including endpoints for a specific service

Remove a service and stop routing traffic to its backing pods

Open a service's live configuration in an editor for in-place modification

List all ingress resources and their associated hosts and paths

List all endpoints showing the backing pod IPs for each service

Expose a single pod as a LoadBalancer service with an external IP

Expose a deployment as a NodePort service accessible on every cluster node

Export a service definition as YAML to inspect its selectors and ports

Change the type of a service from ClusterIP to LoadBalancer using a JSON patch

Create an internal ClusterIP service with a specific port mapping

Create a NodePort service that forwards traffic to a specified target port

Create a LoadBalancer service that provisions an external cloud load balancer

Create an Ingress resource to route HTTP traffic to a service

Delete an Ingress resource and remove its routing rules

Apply a NetworkPolicy manifest to restrict ingress or egress traffic between pods

List all NetworkPolicy resources in a specific namespace

Forward a local port to a Kubernetes service for local testing without a public endpoint

Export the default service account definition for the current namespace as YAML

Initialise a Terraform working directory, downloading providers and modules

Preview the infrastructure changes Terraform will make without applying them

Apply the Terraform configuration to create or update real infrastructure

Destroy all infrastructure resources managed by the current Terraform configuration

Check Terraform configuration files for syntax errors and internal consistency

Reformat Terraform configuration files to the canonical style

Print the output values defined in the Terraform configuration

List all resources tracked in the current Terraform state file

Display a human-readable view of the current Terraform state

Import an existing infrastructure resource into the Terraform state without recreating it

Generate a Terraform execution plan and save it to a file for later use

Apply a previously saved Terraform execution plan file

Apply a Terraform configuration with an inline variable override

Create a new Terraform workspace for environment isolation

Switch to an existing Terraform workspace

Apply Terraform changes to a single specific resource, ignoring others

Move a resource to a different address in the Terraform state file without recreating it

Remove a resource from Terraform state without destroying the real infrastructure

Mark a Terraform-managed resource for forced recreation on the next apply

Apply Terraform changes without prompting for interactive confirmation