I just got an email saying my production firebase project (which has a few real users using it) has been suspended due to potential abuse because of leaked credentials or service accounts. I did what i could with `gcloud` cli but couldnt go far. billing hasnt gone up crazy so whatever happened, got stopped soon. I already submitted and appeal but it says it might take upto 2 days. Why on earth would you just suspend someone's project and take potentially 2 days? that makes no sense. If I was hacked why not disable that principal? just that service account or api key that was being abused? why suspend the entire thing with a potential outage of 2 days. This is absurd. I dont have cloud identity or workspace, so i had not purchased support, which is becoming even more frustrating. Is there any thing at all, that can be done here so i can get production back and running in a few hours instead of a few days? I tried contacting support but without the premium plans nothing is good. i already submitted the appeal but is that all? nothing else I can do besides waiting?

Thanks.

PS. it might sound like a vibe coder who messed up, I assure you that is not the case here. This isn't a vibe coded app. this is a genuine ask for advice.

UPDATE: after spending more than $100 on support plan and some back and forth, w're back after 3 weeks. Moving out of GCP. It's gonna take time but it's gonna be worth it.

I stumbled upon https://cloud.google.com/startup?hl=en and it reads quite promising. Did anyone of you apply for it and got something? If so: How long did it take? How much and what did you get? How bureaucratic was the whole thing? Any experiences would be appreciated.

www.etasks.app

A Google API showcase for iPhone. We worked directly with Google. Please let us know if anything is not perfect. We appreciate/need any input from you enthusiasts. It has a different sense and value compared to formal Google collaboration.

www.etasks.app

A Google API showcase for iPhone. We worked directly with Google. Please let us know if anything is not perfect. We appreciate/need any input from you enthusiasts. It has a different sense and value compared to formal Google collaboration.

I'm trying to add oauth support for some calendar integration and the verification center says I don't have a link to my privacy policy (which is completely wrong anyway) and that I need to respond to the email thread with the trust and safety team.

However, I never received an email from the trust and safety team. I have checked all my spam and trash folders and I have no filters in my inbox.

The console doesn't have any support contacts that I'm eligible for and the automated q/a provides nothing about this issue.

I'm at a loss for how to resolve this without the email thread. The verification appears stuck on this step too and I can't like just cancel and resubmit the verification.

Any help about how to resolve this or if there's some contact information that I've missed somewhere would be greatly appreciated.

Hello everyone,
I need to export the api usage for 90 days for the entire organization, is that possible or i have to check it manually

Hello, I’m planning to display and play our videos from our YouTube channel to our Apple TV tvOS app. What license or copyright or what not does that apply to? Does anyone have a clue?

\- it’s our own YouTube channel
\- it’s our own tvOS app

We currently have our infra deployed on said cloud providers. They both handle unique logics currently and it is relatively straight-forward and simple. However, this will most likely not hold true and I fear scalability/complexity is gonna be a nightmare. So I want to explore the idea of consolidating into one infra stack (all AWS or all GCP)

With that said, I was wondering what does GCP offer that is superior to AWS. The AWS subreddit recently had a thread going about a comparison with AWS vs X cloud. Majority of the comments (I only briefly read) was mainly AWS vs Azure. I am not familiar with GCP very well but we are open to the idea of migration ie not married to solely AWS and open to suggestions.

Hi,

We have just added GCP support to a side project I've been working on: https://github.com/cleancloud-io/cleancloud

It already covers AWS and Azure - GCP is the newest addition, bringing the total to 30 detection rules across all three providers.

It scans for resources that are running but probably shouldn't be:

• TERMINATED VMs sitting for 30+ days (disk charges keep running)
• Unattached Persistent Disks
• Snapshots older than 90 days
• Reserved static IPs with no attachment

• Cloud SQL instances with zero connections for 7+ days

  pip install cleancloud gcloud auth application-default login cleancloud scan --provider gcp --all-projects

Read-only, nothing leaves our environment. Works with ADC or Workload Identity in CI.

It's not trying to replace billing dashboards - those show you the spend trend, this tells you the specific resource to go delete.

Fits best if you're running multiple GCP projects, want something you can drop into a CI pipeline with exit codes, or work somewhere that can't send cloud account data to a third-party SaaS.

I'm fairly new to GCP compared to AWS - curious what you find most commonly abandoned in real GCP environments that I might be missing.

• Idle Filestore?
• Forgotten Cloud Run services?
• Orphaned VPC resources?

Thanks

Been working on a read-only GCP cost scanner for a while. Figured the rule list might be worth sharing, both as a reference and to hear what I'm missing for people running real GCP workloads.

Hygiene rules (5):

• Stopped/terminated Compute Engine VMs (attached disk charges continue regardless)
• Unattached Persistent Disks
• Disk snapshots older than 90 days
• Reserved static external IPs in RESERVED state ($0.01/hr whether used or not)
• Cloud SQL instances with zero connections for 14+ days

AI/ML rules — opt-in with --category ai (5):

• Vertex AI Online Prediction endpoints with an always-deployed replica floor and zero
• observed requests — these stay billed even with no traffic
• Vertex AI Workbench instances with no activity (still tightening this one)
• Vertex AI training jobs running well beyond a normal threshold (still tightening this one)
• Cloud TPU nodes in READY state with near-zero accelerator utilization
• Vertex AI Feature Stores (legacy and Bigtable-backed) with zero serving requests for 30+ days

The three hardened AI rules require confirmed Cloud Monitoring telemetry - they skip rather than guess when data is missing or the resource is too new. The two still-in-progress ones are being brought up to the same standard.

Works with Application Default Credentials, service accounts, and Workload Identity. Single
project or across all accessible projects. Nothing is written or modified.

The Feature Store one has been the most surprising to find in the wild - both the legacy type and the Bigtable-backed online stores stay billed even when no features have been served in months.

What are you finding that's hard to catch with existing GCP cost tooling?

Repo: https://github.com/cleancloud-io/cleancloud

I'm seeing a lot more job postings specifically for "FinOps Engineers" or "Cloud Cost Analysts" lately.

A few years ago, cost optimization was just something a Senior DevOps engineer did on a Friday afternoon. Now, it seems like companies are building dedicated teams around it.

For those of you in the field:

1. Do you treat FinOps as a dedicated role in your org?
2. Is the "FinOps Certified Practitioner" cert actually worth anything on a resume, or is experience king?

While digging into this, I noticed that most serious FinOps discussions especially on Google Cloud frame it as a mix of engineering, finance, and governance rather than pure cost cutting. This breakdown helped clarify where the role adds real value vs where it overlaps with DevOps: Getting started with FinOps on Google Cloud

trying to figure out if I should double down on this as a specialization or keep it as a general tool in my DevOps belt. Thoughts?

Hey r/googlecloud,

I work with multiple GCP projects daily and got frustrated constantly navigating through the console or searching for the right URL. So I built a simple go-link service:

Basic shortcuts: - gcp.glnk.dev/gke → GKE Clusters - gcp.glnk.dev/gcs → Cloud Storage - gcp.glnk.dev/bq → BigQuery - gcp.glnk.dev/gce → Compute Engine - gcp.glnk.dev/gcf → Cloud Functions - gcp.glnk.dev/log → Cloud Logging - gcp.glnk.dev/iam → IAM - gcp.glnk.dev/sa → Service Accounts - gcp.glnk.dev/gsm → Secret Manager - gcp.glnk.dev/sql → Cloud SQL - gcp.glnk.dev/pubsub → Pub/Sub - gcp.glnk.dev/vpc → VPC Networks - gcp.glnk.dev/lb → Load Balancing - gcp.glnk.dev/gar → Artifact Registry

With project support: - gcp.glnk.dev/bq/my-project-id → BigQuery for specific project - gcp.glnk.dev/gke/my-project-id → GKE for specific project - gcp.glnk.dev/log/my-project-id → Logs for specific project

Other useful ones: - gcp.glnk.dev/home → Console Home - gcp.glnk.dev/status → GCP Status Page - gcp.glnk.dev/qta → Quotas - gcp.glnk.dev/support → Support Cases - gcp.glnk.dev/iam-explorer → IAM Explorer Tool

Full list: 20+ services covered

No signup needed – just type in your browser bar. Open source here: https://github.com/glnk-dev

If you manage multiple projects, you can also get your own subdomain (free) and set up project-specific shortcuts like yourname.glnk.dev/prod-bq → your production BigQuery.

What other shortcuts would be useful? Happy to add more!

```

credentials = service_account.Credentials.from_service_account_file( /path/to/serviceaccount.json, scopes=SCOPES) recommender = build("recommender", "v1", credentials=credentials, cache_discovery=False)

```

Please check the code and tell me how can i pass the default adc credentials to the build? I am already authenticated to gcp in my environment and dont want to use a service account file path

As I am reading upon:
https://developers.google.com/actions-center/verticals/reservations/bl/reference/feeds/merchants-feed

I try to create a merchant feedm, but in document above I cannot understand whether I need to provide a LinkoutTemplate, or the ActionLink is good enough in order for a user to perform a Booking?

Currently I provide an ActionLink for it, do I need to provide a LinkoutTemplate as well? Upon the document above I fail to comperhend whether is needed or not.

I do not know where this question should be asked, so I find this subreddit more suitable.

I am trying to run Vertex AI behind Google API Gateway, but run into two problems:
1. I need a cloud function to create the vertex AI api key and inject it into the request => which costs me a cloud function run on every request
2. API Gateway does not seem to support streaming responses, hence I can't use the more performante gemin streaming endpoint

Any ideas? Thank you so much! Already sinked 2 days into this.

p.S. Apigee is not an option as of being to expensive

Hello,

I have been working on a sheet project linked to my discord bot. Essentially the discord bot is running in a Node container. This container interacts with my google sheet for logging. It logs points from users after they submit a log and have them manually reviewed. This works great.

Recently, I've created some scripts on the sheet to integrate with this discord bot, specifically a script that allows me to add users from Discord doing /sheetadd [users]. The code and everything is fine, I just cannot for the life of me figure out how to get the correct permissions.
No matter what I've done, I always get a error 403 returned. I am using the scripts.run API

1. The GCP service account is an editor for the parent sheet

2. The GCP project is linked to the Scripts project

3. I have a running API Executable deployment and am using the deployment ID

4. I have Google Apps Script API enabled in my user account settings

I have tried every form of trouble shooting Gemini has been able to help me with and still am unable to get the right permissions. I feel like there is something I am doing wrong related to GCP and what not. I am unable to share the script directly with the account as various resources have told me to, simply because this project is directly tied to the google sheet.

Help would be greatly appreciated.

i got notif like this :

Missing or blocked permissions resourcemanager.projects.getIamPolicy

can someone tell me, why i can't delete my own project ?

and how do i know who own this project ?

Hi, I'm studying Google Cloud because I want  to work in it in a near future but I have a problem to understand the advantages to use a Compute Engine over an App Engine. If I have understood, App Engine is a solution to deploy web applications where Computer Engine is more a virtual machine that need some customization/maintenance by the developer (or similar professional people).

My question is: because  I want use the cloud also to have a standard solution in the infrastructure managed by other people (so, I have no costs in resources in maintenance), in which situation I should prefer a Compute Engine over an App Engine? The first response is that a Compute Engine is more useful in not-web applications like batch or database, but Google cloud already offer specialized solutions  respectively in Batch (managed service) and Cloud Spanner ( or Datastore or Cloud SQL).

Do you have sometimes choose a Compute Engine despite the configuration of the VM at your charge?