NAME gcloud - manage Google Cloud resources and developer workflow SYNOPSIS gcloud GROUP | COMMAND [--account=ACCOUNT] [--billing-project=BILLING_PROJECT] [--configuration=CONFIGURATION] [--flags-file=YAML_FILE] [--flatten=[KEY,...]] [--format=FORMAT] [--help] [--project=PROJECT_ID] [--quiet, -q] [--verbosity=VERBOSITY; default="warning"] [--version, -v] [-h] [--access-token-file=ACCESS_TOKEN_FILE] [--impersonate-service-account=SERVICE_ACCOUNT_EMAILS] [--log-http] [--trace-token=TRACE_TOKEN] [--no-user-output-enabled] DESCRIPTION The gcloud CLI manages authentication, local configuration, developer workflow, and interactions with the Google Cloud APIs. For a quick introduction to the gcloud CLI, a list of commonly used commands, and a look at how these commands are structured, run gcloud cheat-sheet or see the `gcloud` CLI cheat sheet (https://cloud.google.com/sdk/docs/cheatsheet). GLOBAL FLAGS --account=ACCOUNT Google Cloud user account to use for invocation. Overrides the default core/account property value for this command invocation. --billing-project=BILLING_PROJECT The Google Cloud project that will be charged quota for operations performed in gcloud. You can use this flag to specify the billing project when you need to operate on one project, but need quota against a different project. If both billing/quota_project and --billing-project are specified, --billing-project takes precedence. Run $ gcloud config set --help to see more information about billing/quota_project. --configuration=CONFIGURATION Named configuration to use for this command invocation. To set the equivalent of this flag for a terminal session, you can also use the CLOUDSDK_ACTIVE_CONFIG_NAME environment variable. For more information on how to use configurations, run: gcloud topic configurations. --flags-file=YAML_FILE A YAML or JSON file that specifies a --flag:value dictionary. Useful for specifying complex flag values with special characters that work with any command interpreter. Additionally, each --flags-file arg is replaced by its constituent flags. See $ gcloud topic flags-file for more information. --flatten=[KEY,...] Flatten output resource slices in KEY into separate records for each item in each slice. Multiple keys and slices may be specified. This also flattens keys for --format and --filter. For example, --flatten=abc.def flattens abc.def[].ghi references to abc.def.ghi. A resource record containing abc.def[] with N elements will expand to N records in the flattened output. This allows you to specify what resource-key the filter will operate on. This flag interacts with other flags that are applied in this order: --flatten, --sort-by, --filter, --limit. --format=FORMAT Sets the format for printing command output resources. The default is a command-specific human-friendly output format. If both core/format and --format are specified, --format takes precedence. --format and core/format both take precedence over core/default_format. The supported formats are limited to: config, csv, default, diff, disable, flattened, get, json, list, multi, none, object, table, text, value, yaml. For more details run $ gcloud topic formats. Run $ gcloud config set --help to see more information about core/format. --help Display detailed help. --project=PROJECT_ID The Google Cloud project ID to use for this invocation. If omitted, then the current project is assumed; the current project can be listed using gcloud config list --format='text(core.project)' and can be set using gcloud config set project PROJECTID. --project and its fallback core/project property play two roles in the invocation: they specify both the project of the resource to operate on, and the project for API enablement checks, quota, and billing. To specify a different project for quota and billing, use the --billing-project flag or the billing/quota_project property. --quiet, -q Disable all interactive prompts when running gcloud commands. If input is required, defaults will be used, or an error will be raised. Overrides the default core/disable_prompts property value for this command invocation. This is equivalent to setting the environment variable CLOUDSDK_CORE_DISABLE_PROMPTS to 1. --verbosity=VERBOSITY; default="warning" Sets the verbosity level for this command invocation. This overrides the default verbosity level and the configured core/verbosity property. VERBOSITY must be one of: debug, info, warning, error, critical, none. --version, -v Print version information and exit. This flag is only available at the global level. -h Print a summary help and exit. OTHER FLAGS --access-token-file=ACCESS_TOKEN_FILE A file path to read the access token. This flag is used to authenticate gcloud with an access token. Any existing credentials for the active account will be ignored. The file should only contain an access token with no other information. Overrides the default auth/access_token_file property value for this command invocation. --impersonate-service-account=SERVICE_ACCOUNT_EMAILS All API requests for this gcloud invocation, instead of using the currently selected account, will be made as the given service account or target service account in an impersonation delegation chain. You can specify either a single service account as the impersonator, or a comma-separated list of service accounts to create an impersonation delegation chain. The impersonation is done without needing to create, download, or activate a key for the service account(s). In order to make API requests as a service account, your currently selected account must have an IAM role that includes the iam.serviceAccounts.getAccessToken permission for the service account(s). The roles/iam.serviceAccountTokenCreator role has the iam.serviceAccounts.getAccessToken permission. You can also create a custom role. You can specify a list of service accounts, separated with commas. This creates an impersonation delegation chain in which each service account delegates its permissions to the next service account in the chain. Each service account in the list must have the roles/iam.serviceAccountTokenCreator role on the next service account in the list. For example, when --impersonate-service-account= SERVICE_ACCOUNT_1,SERVICE_ACCOUNT_2, the active account must have the roles/iam.serviceAccountTokenCreator role on SERVICE_ACCOUNT_1, which must have the roles/iam.serviceAccountTokenCreator role on SERVICE_ACCOUNT_2. In this case, SERVICE_ACCOUNT_1 is the impersonated service account and SERVICE_ACCOUNT_2 is the delegate. Overrides the default auth/impersonate_service_account property value for this command invocation. --log-http Log all HTTP server requests and responses to stderr. Overrides the default core/log_http property value for this command invocation. --trace-token=TRACE_TOKEN Token used to route traces of service requests for investigation of issues. Overrides the default core/trace_token property value for this command invocation. --user-output-enabled Print user intended output to the console. Overrides the default core/user_output_enabled property value for this command invocation. Use --no-user-output-enabled to disable. GROUPS GROUP is one of the following: access-approval Manage Access Approval requests and settings. access-context-manager Manage Access Context Manager resources. active-directory Manage Managed Microsoft AD resources. agent-identity Manage Agent Identity resources. agent-registry Manage Agent Registry resources. ai Manage entities in Vertex AI. ai-platform Manage AI Platform jobs and models. alloydb Create and manage AlloyDB databases. anthos Anthos command Group. api-gateway Manage Cloud API Gateway resources. apigee Manage Apigee resources. apihub Manage Apihub resources. app Manage your App Engine deployments. app-topology Manage App Topology resources and query topology graphs. apphub Manage App Hub resources. artifacts Manage Artifact Registry resources. asset Manage the Cloud Asset Inventory. assured Read and manipulate Assured Workloads data controls. audit-manager Enroll resources, audit workloads and generate reports. auth Manage oauth2 credentials for the Google Cloud CLI. backup-dr Manage Backup and DR resources. batch Manage Batch resources. beyondcorp Manage Beyondcorp resources. biglake Create and manage Google Cloud BigLake resources. bigtable Manage your Cloud Bigtable storage. billing Manage billing accounts and associate them with projects. bms Manage Bare Metal Solution resources. bq Manage Bq resources. builds Create and manage builds for Google Cloud Build. certificate-manager Manage SSL certificates for your Google Cloud projects. cloud-shell Manage Google Cloud Shell. cloudlocationfinder Manage Cloudlocationfinder resources. cluster-director Manage Cluster Director resources. colab Manage Colab Enterprise resources. compliance-manager Manage Compliance Manager resources. components List, install, update, or remove Google Cloud CLI components. composer Create and manage Cloud Composer Environments. compute Create and manipulate Compute Engine resources. config View and edit Google Cloud CLI properties. container Deploy and manage clusters of machines for running containers. data-catalog Manage Data Catalog resources. database-migration Manage Database Migration Service resources. dataflow Manage Google Cloud Dataflow resources. datalineage Manage Google Cloud Data Lineage resources. dataplex Manage Dataplex resources. dataproc Create and manage Google Cloud Dataproc clusters and jobs. datastore Manage your Cloud Datastore resources. datastream Manage Cloud Datastream resources. deploy Create and manage Cloud Deploy resources. deployment-manager Manage deployments of cloud resources. design-center Manage Application Design Center resources. developer-connect Manage Developer Connect resources. developer-knowledge Manage Developer Knowledge resources and query knowledge base. dns Manage your Cloud DNS managed-zones and record-sets. domains Manage domains for your Google Cloud projects. edge-cache Manage Media CDN resources. edge-cloud Manage edge-cloud resources. emulators Set up your local development environment using emulators. endpoints Create, enable and manage API services. essential-contacts Manage Essential Contacts. eventarc Manage Eventarc resources. filestore Create and manipulate Filestore resources. firebase Work with Google Firebase. firestore Manage your Cloud Firestore resources. functions Manage Google Cloud Functions. gemini Manage resources associated with Gemini Code Assist and Gemini Cloud Assist. healthcare Manage Cloud Healthcare resources. iam Manage IAM service accounts and keys. iap Manage IAP policies. identity Manage Cloud Identity Groups and Memberships resources. ids Manage Cloud IDS. infra-manager Manage Infra Manager resources. kms Manage cryptographic keys in the cloud. logging Manage Cloud Logging. looker Manage Looker resources. lustre Manage Lustre resources. managed-kafka Administer Managed Service for Apache Kafka clusters, topics, and consumer groups. memcache Manage Cloud Memorystore Memcached resources. memorystore Manage Memorystore resources. metastore Manage Dataproc Metastore resources. migration The root group for various Cloud Migration teams. ml Use Google Cloud machine learning capabilities. model-armor Model Armor is a service offering LLM-agnostic security and AI safety measures to mitigate risks associated with the use of large language models (LLMs). monitoring Manage Cloud Monitoring dashboards. netapp Create and manipulate Cloud NetApp Files resources. network-connectivity Manage Network Connectivity resources. network-management Manage Network Management resources. network-security Manage Network Security resources. network-services Manage Network Services resources. notebooks Notebooks Command Group. observability Manage Observability resources. oracle-database Manage Oracle Database resources. org-policies Create and manage Organization Policies. organizations Create and manage Google Cloud Platform Organizations. pam Manage Privileged Access Manager (PAM) entitlements and grants. parametermanager Parameter Manager is a single source of truth for your parameters. policy-intelligence A platform to help administrators better understand, use, and manage policies at scale. policy-troubleshoot Troubleshoot Google Cloud Platform policies. privateca Manage private Certificate Authorities on Google Cloud. projects Create and manage project access policies. publicca Manage accounts for Google Trust Services' Certificate Authority. pubsub Manage Cloud Pub/Sub topics, subscriptions, and snapshots. quotas Manage Cloud Quotas quota info, quota preferences and quota adjuster settings. recaptcha Manage reCAPTCHA Enterprise Keys. recommender Manage Cloud recommendations and recommendation rules. redis Manage Cloud Memorystore Redis resources. resource-manager Manage Cloud Resources. run Manage your Cloud Run applications. scc Manage Cloud SCC resources. scheduler Manage Cloud Scheduler jobs and schedules. secrets Manage secrets on Google Cloud. service-directory Command groups for Service Directory. service-extensions Manage Service Extensions resources. service-health Request events that are relevant to your project or organization. services List, enable and disable APIs and services. source Cloud git repository commands. source-manager Manage Secure Source Manager resources. spanner Command groups for Cloud Spanner. sql Create and manage Google Cloud SQL databases. storage Create and manage Cloud Storage buckets and objects. support Manage Support resources. tasks Manage Cloud Tasks queues and tasks. topic gcloud supplementary help. transcoder Manage Transcoder jobs and job templates. transfer Manage Transfer Service jobs, operations, and agents. vector-search Manage Vector Search data objects. vmware Manage Google Cloud VMware Engine resources. workbench Workbench Command Group. workflows Manage your Cloud Workflows resources. workload-identity Manage Workload Identity. workspace-add-ons Manage Google Workspace Add-ons resources. workstations Manage Cloud Workstations resources. COMMANDS COMMAND is one of the following: cheat-sheet Display gcloud cheat sheet. docker (DEPRECATED) Enable Docker CLI access to Google Container Registry. feedback Provide feedback to the Google Cloud CLI team. help Search gcloud help text. info Display information about the current gcloud environment. init Initialize or reinitialize gcloud. survey Invoke a customer satisfaction survey for Google Cloud CLI. version Print version information for Google Cloud CLI components.