Skip to main content
emisar

Google Cloud networking diagnostics

v0.1.3

Read-only Google Cloud VPC, subnet, firewall, route, address, Cloud Router, Cloud NAT, VPN, and Interconnect diagnostics. Outputs are fixed projections that omit arbitrary descriptions, labels, and credential-shaped fields.

14 allowed by default
Pack ID
gcp-networking
Vendor
emisar
OS
linux
Actions
14
Required binaries. Install these on the host before relying on the pack — an action that calls a missing one fails at run time.
gcloud

Install

emisar pack install fetches this pack, re-validates it, and verifies its content hash against the --hash below — the exact bytes this page was rendered against, so a tampered copy is rejected — before copying it into the runner's packs dir. The command reloads a running daemon itself; no manual restart.

on the runner host 
sudo emisar pack install gcp-networking --hash sha256:6ab7950b2e31bb7996e3521726b550efb50b0fffbae7aae871850a4a4ac89fa2

Setup

Drives the gcloud CLI on the runner host with an explicitly named project. Authenticate gcloud before loading the pack.

Environment

Set these on the runner host, then add each name to execution.inherit_env so the value reaches the action.

  • CLOUDSDK_CONFIG

    Optional gcloud configuration directory.

  • CLOUDSDK_AUTH_CREDENTIAL_FILE_OVERRIDE

    Optional credential file that overrides the active gcloud account.

Notes

  • The principal needs roles/compute.networkViewer or equivalent get/list permissions.
  • Any credential/config env must be allowlisted in the runner's execution.inherit_env ; attached service accounts and workload identity need no credential env.
  • This remote-target pack declares no host detection signal and is never auto-suggested merely because gcloud is installed.
  • Every action passes --quiet and an explicit --project so ambient project configuration cannot redirect a request.

Verify it works

Runs gcp.networks, a low-risk read that confirms the pack can reach its target. Run it on the host once the pack is installed; pack install runs it for you.

on the runner host 
sudo emisar pack verify gcp-networking

Install and configure a pack walks through the whole sequence on a host.

Actions 14 total

View on GitHub
  • gcp.addresses script low Low — read-only or trivially reversible

    gcloud compute addresses list

    List bounded global and regional IP addresses, purposes, status, and consumers.

    View source on GitHub
  • gcp.firewall_rules script low Low — read-only or trivially reversible

    gcloud compute firewall-rules list

    List bounded VPC firewall rules with match criteria and allow or deny actions.

    View source on GitHub
  • gcp.interconnect_attachments script low Low — read-only or trivially reversible

    gcloud compute interconnects attachments list

    List bounded Cloud Interconnect VLAN attachments and operational state.

    View source on GitHub
  • gcp.interconnect_diagnostics script low Low — read-only or trivially reversible

    gcloud compute interconnects get-diagnostics

    Show LACP and physical-link diagnostics for one Dedicated Interconnect.

    View source on GitHub
  • gcp.nat_describe script low Low — read-only or trivially reversible

    gcloud compute routers nats describe

    Show one Cloud NAT's address allocation, subnet coverage, logging, and rules.

    View source on GitHub
  • gcp.network_describe script low Low — read-only or trivially reversible

    gcloud compute networks describe

    Show one VPC network and its peering topology without arbitrary labels or descriptions.

    View source on GitHub
  • gcp.networks script low Low — read-only or trivially reversible

    gcloud compute networks list

    List bounded VPC network topology without arbitrary labels or descriptions.

    View source on GitHub
  • gcp.router_status script low Low — read-only or trivially reversible

    gcloud compute routers get-status

    Show BGP peer state and dynamic best routes for one Cloud Router.

    View source on GitHub
  • gcp.routers script low Low — read-only or trivially reversible

    gcloud compute routers list

    List bounded Cloud Routers with BGP and Cloud NAT attachment summaries.

    View source on GitHub
  • gcp.routes script low Low — read-only or trivially reversible

    gcloud compute routes list

    List bounded non-dynamic VPC routes and their next hops.

    View source on GitHub
  • gcp.subnet_describe script low Low — read-only or trivially reversible

    gcloud compute networks subnets describe

    Show one regional subnet, including primary and secondary ranges.

    View source on GitHub
  • gcp.subnets script low Low — read-only or trivially reversible

    gcloud compute networks subnets list

    List bounded subnet ranges, purposes, roles, and utilization-relevant state.

    View source on GitHub
  • gcp.vpn_gateway_status script low Low — read-only or trivially reversible

    gcloud compute vpn-gateways get-status

    Show tunnel connection state for one HA VPN gateway.

    View source on GitHub
  • gcp.vpn_tunnels script low Low — read-only or trivially reversible

    gcloud compute vpn-tunnels list

    List bounded Cloud VPN tunnels, peer endpoints, selectors, and status.

    View source on GitHub
← Back to registry
Pack reference  Publish your own