Google Cloud load-balancing diagnostics
v0.1.3Read-only Google Cloud load-balancer topology and health diagnostics for backend services, health checks, URL maps, target proxies, forwarding rules, and network endpoint groups. Fixed projections exclude IAP secrets, AWS-auth keys, and custom header values.
gcloud
jq
Install
emisar pack install
fetches this pack, re-validates it, and verifies its content hash against the
--hash
below — the exact bytes this page was rendered against, so a tampered copy is
rejected — before copying it into the runner's packs dir. The command reloads a
running daemon itself; no manual restart.
sudo emisar pack install gcp-load-balancing --hash sha256:1548f56c9bbe3d9cb292357ae7529af75983284d9a18d9f35e89d606b12e5f28
Setup
Drives gcloud and locally projects API responses with jq before they leave the runner. Authenticate gcloud before loading the pack.
Environment
Set these on the runner host, then add each name to
execution.inherit_env
so the value reaches the action.
-
CLOUDSDK_CONFIGOptional gcloud configuration directory.
-
CLOUDSDK_AUTH_CREDENTIAL_FILE_OVERRIDEOptional credential file that overrides the active gcloud account.
Notes
- The principal needs roles/compute.networkViewer or equivalent get/list permissions.
- Complex resource projections use mode-0600 temporary files so gcloud failures remain distinguishable from jq failures; files are removed before exit.
-
Any credential/config env must be allowlisted in the runner's
execution.inherit_env; attached service accounts and workload identity need no credential env. - This remote-target pack declares no host detection signal and is never auto-suggested merely because gcloud is installed.
Verify it works
Runs gcp.backend_services, a low-risk
read that confirms the pack can reach its target. Run it on the host once the pack
is installed; pack install runs it for
you.
sudo emisar pack verify gcp-load-balancing
Install and configure a pack walks through the whole sequence on a host.
Actions 9 total
View on GitHub-
gcp.backend_health script low Low — read-only or trivially reversible
gcloud compute backend-services get-health
Show endpoint health for one global or regional backend service.
View source on GitHub -
gcp.backend_service_describe script low Low — read-only or trivially reversible
gcloud compute backend-services describe
Show one backend service without IAP secrets, AWS-auth keys, or header values.
View source on GitHub -
gcp.backend_services script low Low — read-only or trivially reversible
gcloud compute backend-services list
List bounded backend-service topology without IAP secrets, AWS-auth keys, or header values.
View source on GitHub -
gcp.forwarding_rules script low Low — read-only or trivially reversible
gcloud compute forwarding-rules list
List bounded forwarding rules, addresses, ports, targets, and load-balancing scheme.
View source on GitHub -
gcp.health_checks script low Low — read-only or trivially reversible
gcloud compute health-checks list
List bounded health-check probes, timing, thresholds, and logging state.
View source on GitHub -
gcp.http_proxies script low Low — read-only or trivially reversible
gcloud compute target-http-proxies list
List bounded HTTP target proxies and their URL maps.
View source on GitHub -
gcp.https_proxies script low Low — read-only or trivially reversible
gcloud compute target-https-proxies list
List bounded HTTPS target proxies, URL maps, certificates, and TLS policy.
View source on GitHub -
gcp.network_endpoint_groups script low Low — read-only or trivially reversible
gcloud compute network-endpoint-groups list
List bounded zonal, regional, global, and serverless network endpoint groups.
View source on GitHub -
gcp.url_maps script low Low — read-only or trivially reversible
gcloud compute url-maps list
List bounded host and path routing topology without custom header values.
View source on GitHub