GCP + Steampipe

select
  name,
  location,
  versioning_enabled
from
  gcp_storage_bucket;

+--------------------+----------+--------------------+
| name               | location | versioning_enabled |
+--------------------+----------+--------------------+
| steampipe-io-dev   | us-east1 | false              |
| steampipe-io-stage | us       | false              |
| steampipe-io-prod  | us       | true               |
+--------------------+----------+--------------------+

steampipe plugin install gcp

connection "gcp" {
  plugin    = "gcp"

  # `project` (optional) - The project ID to connect to. This is the project ID (string), not the
  # project name or number. If the `project` argument is not specified for a connection,
  # the project will be determined in the following order:
  #   - The standard gcloud SDK `CLOUDSDK_CORE_PROJECT` environment variable, if set; otherwise
  #   - The `GCP_PROJECT` environment variable, if set (this is deprecated); otherwise
  #   - The current active project, as returned by the `gcloud config get-value project` command
  #project = "YOUR_PROJECT_ID"

  # `credentials` (optional) - Either the path to a JSON credential file that contains Google application credentials,
  # or the contents of a service account key file in JSON format. If `credentials` is not specified in a connection,
  # credentials will be loaded from:
  #   - The path specified in the `GOOGLE_APPLICATION_CREDENTIALS` environment variable, if set; otherwise
  #   - The standard location (`~/.config/gcloud/application_default_credentials.json`)
  #credentials = "~/.config/gcloud/application_default_credentials.json"

  # `impersonate_access_token` (optional) - You can generate an OAuth 2.0 access token by using the gcloud CLI, the REST API, or the Cloud Client Libraries and Google API Client Libraries.
  # Refer https://cloud.google.com/iam/docs/create-short-lived-credentials-direct#gcloud_2 for generating the access token.
  # impersonate_access_token = "ya29.c.c0ASRK0GZ7mv8lIV0iiudmiGBs9m1gqGfBYZzV...aMYJd"

  # `impersonate_service_account` (optional) - The GCP service account (string) which should be impersonated.
  # If not set, no impersonation is done.
  #impersonate_service_account = "YOUR_SERVICE_ACCOUNT"

   # `quota_project` (optional) - The project ID used for billing and quota. When set,
  # this project ID is used to track quota usage and billing for the operations performed with the GCP connection.
  # If `quota_project` is not specified directly, the system will look for the `GOOGLE_CLOUD_QUOTA_PROJECT`
  # environment variable to determine which project to use for billing and quota.
  # If neither is specified, billing and quota are tracked against the project associated with the credentials used for authentication.
  # quota_project = "YOUR_QUOTA_PROJECT_ID"

  # `ignore_error_codes` (optional) - List of additional GCP error codes to ignore for all queries.
  # By default, the common not found error codes are ignored and will still be ignored even if this argument is not set.
  # Refer https://cloud.google.com/resource-manager/docs/core_errors#Global_Errors for more information on GCP error codes
  #ignore_error_codes = ["401", "403"]
}

connection "gcp_my_other_project" {
  plugin      = "gcp"
  project     = "my-other-project"
  credentials = "/home/me/my-service-account-creds.json"
}

connection "gcp_my_other_project" {
  plugin                   = "gcp"
  project                  = "my-other-project"
  impersonate_access_token = "ya29.c.c0ASRK0GZ7mv8lIV0iiudmiGBs9m1gqGfBYZzV...aMYJd"
}

connection "gcp_all" {
  type        = "aggregator"
  plugin      = "gcp"
  connections = ["gcp_project_*"]
}

connection "gcp_project_aaa" {
  plugin  = "gcp"
  project = "project-aaa"
}

connection "gcp_project_bbb" {
  plugin  = "gcp"
  project = "project-bbb"
}

connection "gcp_project_ccc" {
  plugin  = "gcp"
  project = "project-ccc"
}

connection "gcp_all" {
  type        = "aggregator"
  plugin      = "gcp"
  connections = ["gcp_project_*"]
}

connection "gcp_project_aaa" {
  plugin      = "gcp"
  project     = "project-aaa"
  credentials = "/home/me/my-service-account-creds-for-project-aaa.json"
}

connection "gcp_project_bbb" {
  plugin      = "gcp"
  project     = "project-bbb"
  credentials = "/home/me/my-service-account-creds-for-project-bbb.json"
}

connection "gcp_project_ccc" {
  plugin      = "gcp"
  project     = "project-ccc"
  credentials = "/home/me/my-service-account-creds-for-project-ccc.json"
}

select
  *
from
  gcp_project_aaa.gcp_project

select
  *
from
  gcp_project

connection "gcp_all" {
  plugin      = "gcp"
  type        = "aggregator"
  connections = ["gcp_project_aaa", "gcp_project_bbb", "gcp_project_ccc"]
}

select
  *
from
  gcp_all.gcp_project

connection "gcp_all" {
  type        = "aggregator"
  plugin      = "gcp"
  connections = ["gcp_*"]
}

export CLOUDSDK_CORE_PROJECT=myproject
export GOOGLE_CLOUD_QUOTA_PROJECT=billingproject
export GOOGLE_APPLICATION_CREDENTIALS=/path/to/my/creds.json

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/postgres.sh)" -- gcp

CREATE EXTENSION IF NOT EXISTS steampipe_postgres_gcp;
CREATE SERVER steampipe_gcp FOREIGN DATA WRAPPER steampipe_postgres_gcp OPTIONS (config '<your_config>');
CREATE SCHEMA gcp;
IMPORT FOREIGN SCHEMA gcp FROM SERVER steampipe_gcp INTO gcp;

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/sqlite.sh)" -- gcp

$ sqlite3
sqlite> .load ./steampipe_sqlite_extension_gcp.so
sqlite> select steampipe_configure_gcp('<your_config>');

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- gcp

steampipe_export_gcp --config '<your_config>' <table_name>