Skip to main content
emisar

Google Cloud networking diagnostics

v0.1.3

Read-only Google Cloud VPC, subnet, firewall, route, address, Cloud Router, Cloud NAT, VPN, and Interconnect diagnostics. Outputs are fixed projections that omit arbitrary descriptions, labels, and credential-shaped fields.

14 allowed by default
Pack ID
gcp-networking
Vendor
emisar
OS
linux
Actions
14
Required binaries. Install these on the host before relying on the pack. An action that calls a missing binary fails at run time.
gcloud

Use this pack with your agent

New to emisar? Start with the quickstart to connect one Linux host and verify an action. With a runner connected, review this pack's actions and host requirements, then follow installing and verifying a published pack. Your policy decides which actions run, wait for approval, or are denied.

Connect a CLI agent, Claude.ai or ChatGPT to discover the installed actions through the same infrastructure MCP.

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below before copying it into the runner's packs dir. That hash covers the exact bytes this page was built from, so a tampered copy is rejected. The command reloads a running daemon itself, so you don't need to restart it manually.

on the runner host 
sudo emisar pack install gcp-networking --hash sha256:6ab7950b2e31bb7996e3521726b550efb50b0fffbae7aae871850a4a4ac89fa2

Setup

Drives the gcloud CLI on the runner host with an explicitly named project. Authenticate gcloud before loading the pack.

Environment

Set these on the runner host, then add each name to execution.inherit_env so the value reaches the action.

  • CLOUDSDK_CONFIG

    Optional gcloud configuration directory.

  • CLOUDSDK_AUTH_CREDENTIAL_FILE_OVERRIDE

    Optional credential file that overrides the active gcloud account.

Notes

  • The principal needs roles/compute.networkViewer or equivalent get/list permissions.
  • Any credential/config env must be allowlisted in the runner's execution.inherit_env ; attached service accounts and workload identity need no credential env.
  • This remote-target pack declares no host detection signal and is never auto-suggested merely because gcloud is installed.
  • Every action passes --quiet and an explicit --project so ambient project configuration cannot redirect a request.

Verify it works

Runs gcp.networks, a low-risk read that confirms the pack can reach its target. Run it on the host once the pack is installed; pack install runs it for you.

on the runner host 
sudo emisar pack verify gcp-networking

Install and configure a pack walks through the whole sequence on a host.

Actions 14 total

View on GitHub
  • gcp.addresses script low Low: read-only or trivially reversible

    gcloud compute addresses list

    List bounded global and regional IP addresses, purposes, status, and consumers.

    Arguments
    Name Type Required
    project string Yes
    limit integer No

    See the action source for defaults, validation, and limits.

    Link to this action View source on GitHub
  • gcp.firewall_rules script low Low: read-only or trivially reversible

    gcloud compute firewall-rules list

    List bounded VPC firewall rules with match criteria and allow or deny actions.

    Arguments
    Name Type Required
    project string Yes
    limit integer No

    See the action source for defaults, validation, and limits.

    Link to this action View source on GitHub
  • gcp.interconnect_attachments script low Low: read-only or trivially reversible

    gcloud compute interconnects attachments list

    List bounded Cloud Interconnect VLAN attachments and operational state.

    Arguments
    Name Type Required
    project string Yes
    limit integer No

    See the action source for defaults, validation, and limits.

    Link to this action View source on GitHub
  • gcp.interconnect_diagnostics script low Low: read-only or trivially reversible

    gcloud compute interconnects get-diagnostics

    Show LACP and physical-link diagnostics for one Dedicated Interconnect.

    Arguments
    Name Type Required
    project string Yes
    interconnect string Yes

    See the action source for defaults, validation, and limits.

    Link to this action View source on GitHub
  • gcp.nat_describe script low Low: read-only or trivially reversible

    gcloud compute routers nats describe

    Show one Cloud NAT's address allocation, subnet coverage, logging, and rules.

    Arguments
    Name Type Required
    project string Yes
    nat string Yes
    router string Yes
    region string Yes

    See the action source for defaults, validation, and limits.

    Link to this action View source on GitHub
  • gcp.network_describe script low Low: read-only or trivially reversible

    gcloud compute networks describe

    Show one VPC network and its peering topology without arbitrary labels or descriptions.

    Arguments
    Name Type Required
    project string Yes
    network string Yes

    See the action source for defaults, validation, and limits.

    Link to this action View source on GitHub
  • gcp.networks script low Low: read-only or trivially reversible

    gcloud compute networks list

    List bounded VPC network topology without arbitrary labels or descriptions.

    Arguments
    Name Type Required
    project string Yes
    limit integer No

    See the action source for defaults, validation, and limits.

    Link to this action View source on GitHub
  • gcp.router_status script low Low: read-only or trivially reversible

    gcloud compute routers get-status

    Show BGP peer state and dynamic best routes for one Cloud Router.

    Arguments
    Name Type Required
    project string Yes
    router string Yes
    region string Yes

    See the action source for defaults, validation, and limits.

    Link to this action View source on GitHub
  • gcp.routers script low Low: read-only or trivially reversible

    gcloud compute routers list

    List bounded Cloud Routers with BGP and Cloud NAT attachment summaries.

    Arguments
    Name Type Required
    project string Yes
    limit integer No

    See the action source for defaults, validation, and limits.

    Link to this action View source on GitHub
  • gcp.routes script low Low: read-only or trivially reversible

    gcloud compute routes list

    List bounded non-dynamic VPC routes and their next hops.

    Arguments
    Name Type Required
    project string Yes
    limit integer No

    See the action source for defaults, validation, and limits.

    Link to this action View source on GitHub
  • gcp.subnet_describe script low Low: read-only or trivially reversible

    gcloud compute networks subnets describe

    Show one regional subnet, including primary and secondary ranges.

    Arguments
    Name Type Required
    project string Yes
    subnet string Yes
    region string Yes

    See the action source for defaults, validation, and limits.

    Link to this action View source on GitHub
  • gcp.subnets script low Low: read-only or trivially reversible

    gcloud compute networks subnets list

    List bounded subnet ranges, purposes, roles, and utilization-relevant state.

    Arguments
    Name Type Required
    project string Yes
    limit integer No

    See the action source for defaults, validation, and limits.

    Link to this action View source on GitHub
  • gcp.vpn_gateway_status script low Low: read-only or trivially reversible

    gcloud compute vpn-gateways get-status

    Show tunnel connection state for one HA VPN gateway.

    Arguments
    Name Type Required
    project string Yes
    gateway string Yes
    region string Yes

    See the action source for defaults, validation, and limits.

    Link to this action View source on GitHub
  • gcp.vpn_tunnels script low Low: read-only or trivially reversible

    gcloud compute vpn-tunnels list

    List bounded Cloud VPN tunnels, peer endpoints, selectors, and status.

    Arguments
    Name Type Required
    project string Yes
    limit integer No

    See the action source for defaults, validation, and limits.

    Link to this action View source on GitHub
← Back to registry
Pack reference  Publish your own