otty / dotfiles

All tools/Google Cloud CLI

Google Cloud CLI

gcloud

The Google Cloud CLI: projects, clusters and resources from the terminal.

Detected by gcloud, gsutil, bq | macOS, Linux, Windows |cloud.google.com

Sync it gcloud.toml

Sync rules

What travels, what stays, what never leaves

Google Cloud CLI in your home directory Every rule on this page, by file

· configurations/ Sync

· logs/ Exclude

· cache/ Exclude

· surface_data/ Exclude

· config_sentinel Exclude

· gce Exclude

· credentials.db Never synced

· access_tokens.db Never synced

· application_default_credentials.json Never synced

· legacy_credentials/ Never synced

· configurations/ Sync

· logs/ Exclude

· cache/ Exclude

· surface_data/ Exclude

· config_sentinel Exclude

· gce Exclude

· credentials.db Never synced

· access_tokens.db Never synced

· application_default_credentials.json Never synced

· legacy_credentials/ Never synced

Only what the catalog names. A directory that syncs brings everything inside it except what is listed as excluded here.

apps/gcloud.tomlThe file this page is generated from

id = "gcloud"

name = "Google Cloud CLI"

homepage = "https://cloud.google.com/sdk/docs/configurations"

description = "The Google Cloud CLI: projects, clusters and resources from the terminal."

icon = "theSVG:googlecloud"

detect = ["gcloud", "gsutil", "bq"]

# `gcloud info` prints the config directory: $CLOUDSDK_CONFIG, defaulting to

# ~/.config/gcloud on Unix and %APPDATA%/gcloud on Windows. Named

# configurations are the part worth mirroring.

paths = ["~/.config/gcloud/configurations/", "%APPDATA%/gcloud/configurations/"]

# None of these sit under configurations/, so nothing would collect them

# anyway. They are here as a floor: an exclude is checked before a path is

# read, and it costs nothing to say so for both config directories.

exclude = [

"~/.config/gcloud/logs/",

"~/.config/gcloud/cache/",

"~/.config/gcloud/surface_data/",

"~/.config/gcloud/config_sentinel",

"~/.config/gcloud/gce",

"%APPDATA%/gcloud/logs/",

"%APPDATA%/gcloud/cache/",

"%APPDATA%/gcloud/surface_data/",

"%APPDATA%/gcloud/config_sentinel",

"%APPDATA%/gcloud/gce",

]

# Four separate credential stores, all of them whole-file secrets. The two

# .db files are SQLite holding OAuth refresh tokens.

# Listed under both config directories. A consumer asks "is this file a

# declared secret" without consulting paths, so the Windows spellings are the

# second lock on a door paths already keeps shut.

secret = [

"~/.config/gcloud/credentials.db",

"~/.config/gcloud/access_tokens.db",

"~/.config/gcloud/application_default_credentials.json",

"~/.config/gcloud/legacy_credentials/",

"%APPDATA%/gcloud/credentials.db",

"%APPDATA%/gcloud/access_tokens.db",

"%APPDATA%/gcloud/application_default_credentials.json",

"%APPDATA%/gcloud/legacy_credentials/",

]

# No machine_lines: a named configuration holds account, project and region,

# which are the same wherever you sign in. The machine-specific parts of

# gcloud all live in the credential stores above.

Use it with your dotfile manager

Same data, in the shape your tool already reads

Opens Otty and adds this tool to what it syncs

Opens otty://sync/add/gcloud. Otty ships with this catalog, so the link only has to name the tool — nothing is downloaded.

Every one of these keeps all credential files out.