==============

 Google Cloud

==============

Essential documentation

=======================

https://cloud.google.com/iam/docs/understanding-roles

  List of Predefined roles with Permissions.

gcloud filter syntax

====================

All ``gcloud`` sub-commands ``list`` support ``--filter`` flag to select desired items. Read the

docs::

  gcloud topic filters

or:

https://cloud.google.com/sdk/gcloud/reference/topic/filters

  ``gcloud topic filters``

Examples::

  gcloud compute instances list --filter='name~^stage-' --format='get(name)'

  gcloud scheduler jobs list --filter='name~/stage-' --format='get(name)'

Load balancer

=============

https://cloud.google.com/load-balancing/docs/https/traffic-management

  Traffic management overview for external HTTP(S) load balancers.

https://cloud.google.com/compute/docs/reference/rest/v1/urlMaps

  URL map API.

https://cloud.google.com/compute/docs/reference/rest/v1/regionUrlMaps

  URL map API.

https://cloud.google.com/load-balancing/docs/l7-internal/traffic-management

  Traffic management overview for internal HTTP(S) load balancers.

Health check

============

List health checks::

  gcloud compute health-checks list --format=yaml

In order for LB to function you need to define health checks. They run outside of intranet so

firewall rules have to be applied to VMs for checks to succeed::

  gcloud compute firewall-rules create fw-allow-health-check \

    --network=default \

    --action=allow \

    --direction=ingress \

    --source-ranges=130.211.0.0/22,35.191.0.0/16 \

    --target-tags=allow-health-check \

    --rules=tcp:80

https://cloud.google.com/load-balancing/docs/health-checks

  Creating health checks & magical subnets for FW rules.

SSL certificates

================

To view status and error details run::

  gcloud beta compute ssl-certificates describe $NAME

  gcloud beta compute ssl-certificates list --format=yaml

and check codes against:

https://cloud.google.com/load-balancing/docs/ssl-certificates/troubleshooting

  Troubleshooting SSL certificates. Error codes description.

To set manages sertificate follow instructions:

https://cloud.google.com/load-balancing/docs/ssl-certificates/self-managed-certs

  Using self-managed SSL certificates.