Cloud Engineering

locals {   instance_admins = {   "db-group" : "group:gcp-ccoe-sre@mycloud.io" ,   "dev-team" : "user:dp@mycloud.io"   } } resource "google_project_iam_member" "instance_admin" {   for_each = var . instance_admins   project   = "my-first-project"   role     = "roles/cloudsql.admin"   member   = each. value   condition {       title       = "cloudsql admin role for db team"       description = "cloudsql admin role for db team"       expression   = "resource.name == \" ${ google_sql_database_instance . instance . self_link } \" "   } }

 How to mount GCP Cloud Storage bucket as file system? Cloud Storage FUSE is an open source  FUSE  adapter that allows you to mount Cloud Storage buckets as file systems on Linux or macOS systems. It also provides a way for applications to upload and download Cloud Storage objects using standard file system semantics. Cloud Storage FUSE can be run anywhere with connectivity to Cloud Storage, including Google Compute Engine VMs or on-premises systems . https://cloud.google.com/storage/docs/gcs-fuse

In which zone my GCP's Cloud Shell is provisioned? curl "http://metadata.google.internal/computeMetadata/v1/instance/zone" -H "Metadata-Flavor: Google" Short keys To open Cloud shell: type g followed by s Autocomplete: tab

  How to run gcloud command line using a service account Step-by-step 1) Create a Service Account gcloud iam service - accounts create gcpcmdlineuser  -- display - name "GCP Service Account" 2) List the users gcloud iam service - accounts list   -- filter   gcpcmdlineuser@someproject.gserviceaccount.com 3) Download the service account key gcloud iam service - accounts keys create . / somekey.json  -- iam - account <EMAIL ADDRESS> gcloud iam service - accounts keys create gcpcmdlineuser.json  -- iam - account gcpcmdlineuser@someproject.iam.gserviceaccount.com 4) Associate a ROLE gcloud iam roles create <ROLE NAME>  -- project <YOUR PROJECT ID>  -- file   . / rolename.yaml gcloud projects add - iam - policy - binding someprojecthere  -- member "serviceAccount:gcpcmdlineuser@someproject.iam.gserviceaccount.com"   -- role "roles/owner" gcloud projects add - iam - policy - binding <PROJECT ID>  -- role <RO...