Skip to main content

Google Cloud certificate diagnostics

v0.1.0

Read-only diagnostics for legacy Compute SSL certificates and Certificate Manager certificates, maps, entries, and DNS authorizations. Fixed projections omit certificate PEM, private keys, descriptions, and labels.

7 allowed by default
Pack ID
gcp-certificates
Vendor
emisar
OS
linux
Actions
7
Required binaries. Install these on the host before relying on the pack — an action that calls a missing one fails at run time.
gcloud jq

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

on the runner host
sudo emisar pack install gcp-certificates --hash sha256:da73325336f2d11cdff984948bf6f53fe34f43f1bce873c6e01e6a6fc38f792b

Actions 7 total

View on GitHub
  • gcp.certificate_map_entries script low

    gcloud certificate-manager maps entries list

    List bounded host or primary matchers and certificates in one certificate map.

    View source on GitHub
  • gcp.certificate_maps script low

    gcloud certificate-manager maps list

    List bounded Certificate Manager maps and attached load-balancer targets.

    View source on GitHub
  • gcp.dns_authorizations script low

    gcloud certificate-manager dns-authorizations list

    List bounded Certificate Manager DNS authorizations and required public DNS records.

    View source on GitHub
  • gcp.managed_certificate_describe script low

    gcloud certificate-manager certificates describe

    Show one Certificate Manager certificate's source, SANs, state, and expiry without PEM.

    View source on GitHub
  • gcp.managed_certificates script low

    gcloud certificate-manager certificates list

    List bounded Certificate Manager certificate source, SANs, provisioning state, and expiry without PEM.

    View source on GitHub
  • gcp.ssl_certificate_describe script low

    gcloud compute ssl-certificates describe

    Show one legacy Compute SSL certificate's status, SANs, and expiry without PEM.

    View source on GitHub
  • gcp.ssl_certificates script low

    gcloud compute ssl-certificates list

    List bounded legacy Compute SSL certificate status, SANs, and expiry without PEM.

    View source on GitHub