Questions tagged [gcloud]
Questions relating to the usage of the Google Cloud SDK's `gcloud` command-line tool.
220
questions
65
votes
13
answers
73k
views
The following signatures couldn't be verified because the public key is not available: NO_PUBKEY
My environment:
# uname -a
Linux app11 4.9.0-5-amd64 #1 SMP Debian 4.9.65-3+deb9u2 (2018-01-04) x86_64 GNU/Linux
#
# cat /etc/*release
PRETTY_NAME="Debian GNU/Linux 9 (stretch)"
NAME="Debian GNU/...
28
votes
4
answers
51k
views
How to use GOOGLE_APPLICATION_CREDENTIALS with gcloud on a server?
What is the simplest way to use the gcloud command line non-interactively with a Service Account outside of GCE? Preferably without littering the file system with credentials files, which is what ...
25
votes
4
answers
5k
views
gcloud docker -- push results in login attempt failed with 404
I am trying to push a docker image to Google's container registry but keep getting a error about Docker login having failed. I run
gcloud docker -- push gcr.io/<my-project-id>/test-image
I ...
8
votes
1
answer
5k
views
Static IP with "kubectl expose" on Google Container Engine stays in <pending> state forever
I am trying to expose a kubernetes "deployment" via the kubectl expose command, wih a static IP address, on Google Container Engine.
With an ephemeral IP, everything works fine:
kubectl expose ...
7
votes
1
answer
12k
views
Cannot edit VM or access it via SSH. error:Supplied fingerprint does not match current metadata fingerprint
I have a Linux machine on Google Cloud, created with Bitnami.
It was working well, and it could be accessed through SSH, usign the web console or putty. However suddenly today it can not be accessed ...
6
votes
2
answers
20k
views
How do i completely logout of Google Cloud? `gcloud auth revoke --all` doesn't cut it
Logging out of Google Cloud seems like it should be easy. If I run:
$ unset GOOGLE_APPLICATION_CREDENTIALS
$ gcloud auth revoke --all
Revoked credentials:
- [my account]
$ gcloud auth list
No ...
6
votes
1
answer
7k
views
Open 443 on Google Compute Instance?
For some reason I can't open port 443 on my google compute instance. I have HTTPS server enabled on the instance, and using gcloud compute firewall-rules list returns the rules below:
NAME ...
6
votes
3
answers
15k
views
default ssh is not working from GCP Console and browser crashes or hang
After creating an instance in Google Cloud Platform(GCP), I was able to click on SSH and open the browser based SSH console to access the instance. (Auto key copying and connect from console itself ...
5
votes
1
answer
3k
views
How to disable update notification in gcloud command?
I am using Google Cloud SDK CLI (gcloud command), and the command is great! Although I'd like to output Google Compute Engine's instances list in JSON format (by running gcloud compute instances list -...
5
votes
2
answers
11k
views
Google Cloud Platform - SSH Connection Refused
After clearing a project and instance of SSH key metadata and running gcloud compute ssh (which will create a new key pair and update project metadata), I am no longer able to SSH in without getting ...
4
votes
1
answer
8k
views
How ephemeral (short lived) is the IP on a gcloud Compute Engine?
VM instance details report the external IP is ephemeral.
Dictionary says this means "lasting for a very short time".
Does anyone know how short?
Static enough to aim DNS to this?
If not very short, ...
4
votes
1
answer
4k
views
Can't access static external IP for Google Cloud Run instance - followed guides (Router, Subnet, NAT, VPC, etc)
I'm trying to assign an external static IP address to our Cloud Run instance, so that I can use it with websockets (which I've read require a static IP in order to work, versus the self-appointed/load-...
4
votes
3
answers
6k
views
How ssh Kubernetes engine instances and check public IPs of Kubernetes engine?
How can I access through ssh to the machine running the Kubernetes Engine?
How can I check a public IP of the machines running the Kubernetes engine?
4
votes
3
answers
20k
views
gcloud SSH connection asks for password instead of passphrase
I've got two VMs set up on Google Cloud Platform. server1 uses an Ubuntu 16.04 image [g1-small (1 vCPU, 1.7 GB memory)]; and the newly created VM, called server2, uses a CoreOS Stable image [f1-micro (...
4
votes
1
answer
1k
views
How to obtain project quotas states (ssd disks, cpu)?
I try to obtain project quotas info for my GCP projects via gcloud or API:
gcloud compute project-info describe --project [my-project-id]
Unfortunately there is no data for CPUs and ssd disks.
I ...
3
votes
1
answer
3k
views
Obtaining the private key from an SSL certificate managed by GCP
I'm using Google Kubenetes Engine and I put an SSL certificate on my Ingress using Google-managed certificates
I've discovered I can view the certificate using this command:
gcloud beta compute ssl-...
3
votes
1
answer
3k
views
How to handle retention policies in GCP Container Registry
GCP Container Registry is built on top of GCP Cloud Storage and one can set quite complex retention policies there.
However there's no such functionality in Container registry and as there's no ...
3
votes
1
answer
7k
views
vm.max_map_count problems on GKE ElasticSearch StatefulSet
A problem appeared on working ElasticSearch cluster on GKE.
Nodes with "data" roles began to crash unexpectedly with an error:
max virtual memory areas vm.max_map_count [65530] is too low, increase ...
3
votes
1
answer
655
views
gsutil rsync "too many values to unpack" error
I'm trying to sync a folder with over 3k files to a bucket on Google Cloud with gsutil. The problem is that less than half of the files are uploaded and then I get this error:
too many values to ...
3
votes
2
answers
2k
views
List NTP information of gcloud kubernetes
Is there an option to show, that metadata.google.internal is used as NTP when i connect to a pod or to the kubernetes VM?
I tried the following: ntpq -p, which results in command not found, but was ...
3
votes
1
answer
3k
views
How to use JSON keys with google cloud gsutil to manage multiple Keys
We have multiple GCP Service account keys from different environment such as DEV,STAGING,..PROD.
I would like to run a command in my jenkins box which is there in Dev environment to create access DEV ...
3
votes
1
answer
7k
views
Copy list of files (-I flag) with gsutil preserving path
I am trying to copy all pictures and static files to a bucket of mine in Google Cloud Platform.
I am attempting this command from the root dir of my app:
find -regextype posix-extended -iregex ".*\.(...
3
votes
2
answers
1k
views
GCloud universal service account
I have around 8 projects created under my GCloud account and it might increase in future.
I am trying to manage inventory and other activity related to all the projects from single place using ...
3
votes
1
answer
7k
views
Run a linux docker container on Windows Server 2022
I have a Windows Server 2022 running on GCP. I've installed docker as described here: https://cloud.google.com/compute/docs/containers#docker_on_windows
Namely, I did this:
Install-Module -Name ...
3
votes
1
answer
488
views
Use ansible gcp modules to create Cloud NAT
I am currently struggling to configure Cloud NAT in gcp via ansible.
I was able to set up the Cloud NAT as described in the documentation: https://cloud.google.com/nat/docs/gke-example with gcloud ...
3
votes
2
answers
1k
views
Giving friendly names to authorised networks via gcloud command
I'm authorising instances access to PostgreSQL via the gcloud command:
gcloud sql instances patch blah-sql-dev --authorized-networks 10.1.1.2/32,10.1.1.3/32,.....
What I'm seeing under Cloud SQL's ...
3
votes
1
answer
3k
views
gcloud scp: Alpha Access Permission required
I try to use gcloud alpha compute scp to transfer files to one of my instances.
I get - Required 'Alpha Access' permission for 'Compute API' when executing the command.
The instance is started with -...
3
votes
1
answer
2k
views
GAE container terminated by container manager
I have an Google App Engine app which is basically a couple NodeJS scripts that run a website.
Some of this scripts are being terminated for apparently no reason, but looking at the logs this is ...
3
votes
1
answer
1k
views
How to run Ansible's gce.py script from inside an instance running in the cloud?
My goal is to create a compute engine instance in Google cloud from which I can run ansible scripts to further create additional instances that will run containers via GKE.
I've figured out a number ...
3
votes
2
answers
6k
views
ERROR: gcloud crashed (ConnectionError): HTTPSConnectionPool(host='oauth2.googleapis.com', port=443):
I have been using gcloud cli for last 3months on my system, but now I start facing this error while authenticating with gcloud auth login or gcloud init --console-only.
After debugging it, I see some ...
2
votes
2
answers
3k
views
mount GCPs buckets with write access
I can successfully mount my bucket using the following command
sudo mount -t gcsfuse -o rw,noauto,user,implicit_dirs,allow_other fakebucket thebucket/
I can go into the bucket find the subfolders ...
2
votes
3
answers
9k
views
Permission denied (publickey). (gcloud.compute.ssh) [/usr/bin/ssh] exited with return code [255]. exited with return code [255]
try to connect the virtual machine with gcloud but failed. Please advise
[email protected]: Permission denied (publickey).
ERROR: (gcloud.compute.ssh) [/usr/bin/ssh] exited with return code [255]...
2
votes
1
answer
202
views
What should I do to keep a common file cache server ? is NFS good idea? [closed]
I am not any networking or devops guy but I have to do this for my company because my company can't afford one, so pardon me for mistakes.
I have got a web app hosted in google cloud and I use load ...
2
votes
1
answer
1k
views
gcloud service account oauth token timeout causing container service auth failure
First time question, and I am also new to attempting to configure/administer google cloud services. Please be gentle.
My employer uses gcloud ontainer registry to store images, and on the client side,...
2
votes
1
answer
6k
views
CryptographyDeprecationWarning: Python 3.5 support will be dropped in the next release of cryptography. Please upgrade your Python
I'm trying to use docker-compose (which was installed via pip3), yet running into following warning everytime I do anything:
# docker-compose version
/usr/local/lib/python3.5/dist-packages/paramiko/...
2
votes
1
answer
2k
views
How to find out who added a user or modified IAM roles of a specific user in GCP?
I tried but could not figure out that how to find out who added a user or modified IAM roles of a specific user in GCP.
is anyone aware of any method?
2
votes
1
answer
7k
views
GCSFuse - Fusermount: mountpoint is not empty
Using gcsfuse to mount a point locally on a server within a script. Running on an Ubuntu 14 LTS server.
I have two fuse mount points and the script transfers data from other mount points into them.
...
2
votes
1
answer
936
views
kubectl "failed to negotiate an api version"
Hello since yesterday morning I'm running into issues trying to access one of my Kubernetes cluster hosted on Google container engine. I had never had problem until it started to fail but now each ...
2
votes
1
answer
1k
views
Can Google gcloud DNS work with seconday DNS servers?
We use Google Cloud DNS for primary DNS zone hosting. As a primary service is seems very functional. However, I cannot see how to allow zone transfers to a list of secondary DNS servers. This would be ...
2
votes
1
answer
3k
views
Google App Engine HTTPS listening ports 8443 or 3443
I am testing an application in the App Engine Flexible Environment, and at some point I will need to process some WebHooks sent on TCP ports 8443 or 3443.
As long as I could test, App Engine load ...
2
votes
1
answer
341
views
How can I identify what ALPHA/BETA features are being used in my GCP organisation?
I'd like to be able to regularly audit my gcp estate by verifying that no unapproved ALPHA/BETA features are enabled.
I can't seem to find a gcloud command that could identify this.
I recognise that ...
2
votes
1
answer
179
views
GCLOUD IAM VPN into gcp network
We want to create a VPN into our GCP network where users are authorized using their IAM credentials. This way we can hide our development servers from the outside world but not from the office/for our ...
2
votes
1
answer
2k
views
Google cloud platform: k8s master cannot ssh to nodes
I have a very strange issue on google cloud platform with one of my K8S clusters.
Two days ago, everything worked like a charm. But yesterday every helm commands used to deploy on this cluster ...
2
votes
2
answers
4k
views
How do I `gcloud compute copy-files` into a GCE instance as root?
I am trying to copy local files to /var/www/.
The instance has two sets of keys. One for the instance creator that's generated by default and one for remote access that I have set up manually.
I have ...
2
votes
0
answers
84
views
GCP node schedule with zone fallback
I'm using preemptive machines for some node pools from my GKE Cluster, and I often get the following error saying the zone resources have been exausted:
Error Type
Error Message
...
2
votes
0
answers
128
views
Can I create a secure multi-app intranet on GCP using IAP?
My vision is to create an intranet at, say, https://intra.sample.com without a firewall where users authenticate via IAP to an https load balancer and users anywhere on the internet (i.e., at home) ...
2
votes
1
answer
1k
views
Will I be charged for a VM instance which was in a project I shut down recently?
I recently shut down a project in gcloud. I had a VM instance running in that.
Will that project charge my free trial credit even after shut down?
1
vote
2
answers
284
views
load balancer mark "unhealty" new group member instance (ubuntu) after dist-upgrade
I've a some VMs (working as web server) behind an instance group on my GCloud.
As usual maintenance I've update (apt dist-upgrade) my "vm-source-image", created a new template and add it to ...
1
vote
1
answer
2k
views
Setting password for MySQL root user in CLoudSQL with private IP address
How to change the password for MySQL root user in GCP CloudSQL DB instance with private IP address . I am able to change the password using the below command from Cloud Shell with Public IP
gcloud ...
1
vote
1
answer
3k
views
gsutil from gcloud/Google Cloud SDK failing with "SyntaxError: invalid syntax" error in bcrypt
Trying to use gsutil today I got the following error:
+ gsutil cp -nra public-read a gs://b
/usr/local/lib/python2.7/dist-packages/cryptography/__init__.py:39: CryptographyDeprecationWarning: Python ...