Google Cloud CLI (gcloud) — Networking Cheat Sheet 2026

Google Cloud CLI (gcloud) Networking Cheat Sheet is the complete quick-reference of Google Cloud CLI (gcloud) Networking commands grouped by function. Copy any command with one click and find what you need with Ctrl+F in under 3 seconds.

Networking

Action	Command	Useful flags
Create VPC network	`gcloud compute networks create NETWORK_NAME --subnet-mode=custom`	`--subnet-mode=custom`
Create subnet	`gcloud compute networks subnets create SUBNET_NAME --network=NETWORK_NAME --region=REGION --range=RANGE`	`--network=NETWORK_NAME --region=REGION --range=RANGE`
List VPC networks	`gcloud compute networks list`
Create firewall rule	`gcloud compute firewall-rules create RULE_NAME --network=NETWORK_NAME --allow=tcp:22 --source-ranges=0.0.0.0/0`	`--network=NETWORK_NAME --allow=tcp:22 --source-ranges=0.0.0.0/0`
List forwarding rules	`gcloud compute forwarding-rules list`	`-rules`
Describe VPC network	`gcloud compute networks describe NETWORK_NAME`
Create VPC peering	`gcloud compute networks peerings create PEERING_NAME --network=NETWORK_NAME --peer-network=PEER_NETWORK --auto-create-routes`	`--network=NETWORK_NAME --peer-network=PEER_NETWORK --auto-create-routes`

⚠️ Dangerous / Destructive Commands

These commands are irreversible. Verify your environment (dev/staging vs prod) before running them.

Action	Command	Warning
⚠️ Destroy ⚠️	`terraform destroy -auto-approve`	Irreversible — verify the target before running
⚠️ Delete	`kubectl delete namespace production`	Irreversible — verify the target before running
⚠️ Prune ⚠️	`docker system prune -af --volumes`	Irreversible — verify the target before running
⚠️ Delete	`pvesh delete /nodes/{node}/qemu/{vmid}`	Irreversible — verify the target before running
⚠️ Delete	`az group delete --name MyResourceGroup --yes`	Irreversible — verify the target before running

FAQ — Frequently Asked Questions

What is the difference between Networking and the other groups?

Each group in this Google Cloud CLI (gcloud) cheat sheet covers a distinct area. Networking focuses on its specific scope, while the other groups and the remaining groups cover networking, storage, security and diagnostics respectively.

How do I check the installed Google Cloud CLI (gcloud) version?

Run the version command (usually google version or google --version). The output shows the client and, when applicable, the server version.

Why does Google Cloud CLI (gcloud) return ‘permission denied’?

A ‘permission denied’ error in Google Cloud CLI (gcloud) usually means the current user lacks sufficient privileges or credentials are not configured. Check: (1) assigned IAM/RBAC roles, (2) an active authentication context via the corresponding login command.

How do I filter Google Cloud CLI (gcloud) output by status or name?

Use flags such as --filter, --selector or --query depending on the tool. You can also pipe into grep or jq to process JSON:

google list | grep RUNNING

What is the fastest way to debug a Google Cloud CLI (gcloud) error?

Add the verbose flag (--verbose, -v or --debug) to the failing command. This reveals the underlying HTTP/API calls and the full error response body.

Official sources & references

Commands cross-checked against vendor documentation and high-authority repositories: