Google Cloud

Essential documentation

https://cloud.google.com/iam/docs/understanding-roles: List of Predefined roles with Permissions.

gcloud filter syntax

All gcloud sub-commands list support --filter flag to select desired items. Read the docs:

gcloud topic filters

or:

https://cloud.google.com/sdk/gcloud/reference/topic/filters: gcloud topic filters

Examples:

gcloud compute instances list --filter='name~^stage-' --format='get(name)'
gcloud scheduler jobs list --filter='name~/stage-' --format='get(name)'

Load balancer

https://cloud.google.com/load-balancing/docs/https/traffic-management: Traffic management overview for external HTTP(S) load balancers.
https://cloud.google.com/compute/docs/reference/rest/v1/urlMaps: URL map API.
https://cloud.google.com/compute/docs/reference/rest/v1/regionUrlMaps: URL map API.
https://cloud.google.com/load-balancing/docs/l7-internal/traffic-management: Traffic management overview for internal HTTP(S) load balancers.

Health check

List health checks:

gcloud compute health-checks list --format=yaml

In order for LB to function you need to define health checks. They run outside of intranet so firewall rules have to be applied to VMs for checks to succeed:

gcloud compute firewall-rules create fw-allow-health-check \
  --network=default \
  --action=allow \
  --direction=ingress \
  --source-ranges=130.211.0.0/22,35.191.0.0/16 \
  --target-tags=allow-health-check \
  --rules=tcp:80

https://cloud.google.com/load-balancing/docs/health-checks: Creating health checks & magical subnets for FW rules.

SSL certificates

To view status and error details run:

gcloud beta compute ssl-certificates describe $NAME
gcloud beta compute ssl-certificates list --format=yaml

and check codes against:

https://cloud.google.com/load-balancing/docs/ssl-certificates/troubleshooting: Troubleshooting SSL certificates. Error codes description.

To set manages sertificate follow instructions:

https://cloud.google.com/load-balancing/docs/ssl-certificates/self-managed-certs: Using self-managed SSL certificates.