Integrations
Google Cloud
Dun connects to Google Cloud with your Google account and manages Cloud Run, Functions, GKE, Cloud SQL, Artifact Registry, Secret Manager, Cloud DNS, and more.
Note
How to connect
Connect once from Integrations → Google Cloud, then toggle on the products you want Dun to manage.
Step 1
Step 2
Step 3
Where to get credentials: https://console.cloud.google.com
What Dun can do
Each product below is something you can turn on. The examples are real prompts you can type in a chat thread.
Cloud Run
Discover Cloud Run services + revisions, redeploy, scale instance bounds, and stream logs.
Deploy my api service to Cloud Run
Show the logs for my Cloud Run service| Permission | Required | What it does |
|---|---|---|
| Read + manage services | Yes | List services and revisions; redeploy, scale, and read logs. |
Cloud Functions
List functions, redeploy from existing source, and read status + logs.
Show me my Google Cloud cloud functions| Permission | Required | What it does |
|---|---|---|
| Read + redeploy functions | Optional | List functions; redeploy, read status and logs. |
App Engine
List services + versions, deploy a new version, shift traffic between versions, and read logs.
Show me my Google Cloud app engine| Permission | Required | What it does |
|---|---|---|
| Read + deploy + migrate traffic | Optional | List services/versions, deploy a version, migrate traffic, read logs. |
Compute Engine
List VM instances; start, stop, and restart them; read instance logs.
Show me my Google Cloud compute engine| Permission | Required | What it does |
|---|---|---|
| Read + control VMs | Optional | List instances; start/stop/restart; read logs. |
Cloud Build
List triggers and builds, run a trigger, and read build logs.
Show me my Google Cloud cloud build| Permission | Required | What it does |
|---|---|---|
| Read + run builds | Optional | List triggers/builds, run a trigger, read build logs. |
Artifact Registry
List repositories, images, and tags; delete a version (behind approval).
Show me my Google Cloud artifact registry| Permission | Required | What it does |
|---|---|---|
| Read + prune images | Optional | List repos/images/tags; delete a version. |
Kubernetes Engine
Read clusters + logs, and list, rolling-restart, and scale workload deployments (public-endpoint clusters; needs the Kubernetes Engine Developer role).
Show me my Google Cloud kubernetes engine| Permission | Required | What it does |
|---|---|---|
| Read + manage workloads | Optional | List/read clusters + logs; list, restart, and scale deployments. |
Cloud DNS
Read managed zones + record sets, add/delete records (changes transaction), and verify domains.
Add an A record for app.example.com in Cloud DNS| Permission | Required | What it does |
|---|---|---|
| Read + edit DNS | Optional | List zones/records; add/delete record sets; verify domains. |
Secret Manager
List, read, write, rotate, and destroy secrets (version-based; destroy is irreversible).
Add a new version of the api-key secret| Permission | Required | What it does |
|---|---|---|
| Read + manage secrets | Optional | List/read; add versions (write/rotate); destroy versions. |
Cloud SQL
List instances, read status, restart (drops connections), and read logs. Restart-only.
Is my Cloud SQL Postgres instance healthy?| Permission | Required | What it does |
|---|---|---|
| Read + restart | Optional | List/read instances; restart; read logs. |
Cloud Scheduler
List jobs; pause, resume, and manually trigger them; read status.
Show me my Google Cloud cloud scheduler| Permission | Required | What it does |
|---|---|---|
| Read + control jobs | Optional | List/read jobs; pause/resume/run; read status. |
Cloud Deploy
List pipelines/releases/rollouts, create releases, and approve rollouts.
Show me my Google Cloud cloud deploy| Permission | Required | What it does |
|---|---|---|
| Read + drive deploys | Optional | List pipelines/releases/rollouts; create release; approve. |
Cloud KMS
List key rings/keys/versions, create versions, rotate keys, and destroy versions (irreversible).
Show me my Google Cloud cloud kms| Permission | Required | What it does |
|---|---|---|
| Read + rotate keys | Optional | List rings/keys/versions; create version; rotate; destroy. |
Cloud Storage
List buckets/objects, download/upload objects, and delete objects or buckets.
Show me my Google Cloud cloud storage| Permission | Required | What it does |
|---|---|---|
| Read + manage objects | Optional | List/download/upload objects; delete objects/buckets. |
Cloud Source Repositories
List repos, read files, branches, and commits (joins the source-control surface).
Show me my Google Cloud cloud source repositories| Permission | Required | What it does |
|---|---|---|
| Read repositories | Optional | List repos; read files/branches/commits. |
Pub/Sub
List topics + subscriptions, read undelivered counts, publish test messages, purge/create/delete subscriptions and topics.
Show me my Google Cloud pub/sub| Permission | Required | What it does |
|---|---|---|
| Read topics + subscriptions | Yes | List topics/subscriptions and read backlog counts. |
| Apply approved publish/purge/create/delete | Optional | Mutations run behind a chat approval. |
Cloud Tasks
List queues, pause/resume/purge, read task-count estimates, create/delete queues.
Show me my Google Cloud cloud tasks| Permission | Required | What it does |
|---|---|---|
| Read queues | Yes | List queues and read rate/retry config + depth. |
| Apply approved pause/resume/purge | Optional | Queue mutations run behind a chat approval. |
Eventarc
List Eventarc triggers, read trigger detail, and delete triggers (the API has no enable/disable toggle).
Show me my Google Cloud eventarc| Permission | Required | What it does |
|---|---|---|
| Read triggers | Yes | List triggers and read event filters + destination. |
Workflows
List workflows, trigger executions, read execution history/detail, cancel executions, delete workflows.
Show me my Google Cloud workflows| Permission | Required | What it does |
|---|---|---|
| Read workflows + executions | Yes | List workflows and read recent executions. |
| Apply approved trigger/cancel/delete | Optional | Execution + delete run behind a chat approval. |
Cloud Load Balancing
List backend services, forwarding rules, target proxies, SSL certs; read backend health; enable/disable backends.
Show me my Google Cloud cloud load balancing| Permission | Required | What it does |
|---|---|---|
| Read LB topology + health | Yes | List LB resources and read backend health. |
| Apply approved backend toggles | Optional | Enable/disable backends behind a chat approval. |
Cloud CDN
List CDN-enabled backends, invalidate cache, read invalidation history + cache-hit stats.
Show me my Google Cloud cloud cdn| Permission | Required | What it does |
|---|---|---|
| Read CDN backends + stats | Yes | List CDN backends and read cache-hit stats. |
| Apply approved cache invalidations | Optional | Invalidations run behind a chat approval. |
Cloud Armor
List security policies + rules, enable/disable rules (preview flag), edit IP denylists, create/delete custom rules.
Show me my Google Cloud cloud armor| Permission | Required | What it does |
|---|---|---|
| Read security policies | Yes | List policies and read rule detail. |
| Apply approved rule changes | Optional | Rule toggles + denylist edits behind chat approval. |
Cloud Endpoints
List services, read config + rollout status, deploy configs, enable/disable services.
Show me my Google Cloud cloud endpoints| Permission | Required | What it does |
|---|---|---|
| Read services + rollouts | Yes | List services and read config + rollout status. |
| Apply approved deploys + toggles | Optional | Config deploy + enable/disable behind chat approval. |
Cloud Domains
List registered domains, read/update DNS settings, configure nameservers, retrieve transfer auth codes (redacted).
Show me my Google Cloud cloud domains| Permission | Required | What it does |
|---|---|---|
| Read registered domains | Yes | List domains and read DNS settings. |
| Apply approved DNS/nameserver changes | Optional | DNS edits + auth-code retrieval behind chat approval. |
Firestore
List databases + collections, estimate document counts, export to storage, list/restore backups, delete databases.
Show me my Google Cloud firestore| Permission | Required | What it does |
|---|---|---|
| Read databases + collections | Yes | List databases/collections and count documents. |
| Apply approved export/restore/delete | Optional | Export, restore, delete behind a chat approval. |
Cloud Spanner
List instances + databases, read utilization, scale processing units, create/delete databases, list/restore backups.
Show me my Google Cloud cloud spanner| Permission | Required | What it does |
|---|---|---|
| Read instances + databases | Yes | List instances/databases and read utilization. |
| Apply approved scale + lifecycle | Optional | Scale + create/delete behind a chat approval. |
AlloyDB
List clusters + instances, restart instances, read connection info (redacted), list/create backups, restore/delete clusters.
Show me my Google Cloud alloydb| Permission | Required | What it does |
|---|---|---|
| Read clusters + instances | Yes | List clusters/instances and read state. |
| Apply approved restart/backup/restore | Optional | Restart, backup, restore behind a chat approval. |
Memorystore
List Redis + Memcached instances, read connection info (redacted), upgrade, import/export RDB, failover, delete.
Show me my Google Cloud memorystore| Permission | Required | What it does |
|---|---|---|
| Read instances | Yes | List Redis/Memcached instances and read detail. |
| Apply approved upgrade/import/failover | Optional | Upgrade, RDB, failover behind a chat approval. |
BigQuery
Job management only: list datasets/tables, read table schema/detail, read job history, cancel jobs, delete tables. No query execution.
Show me my Google Cloud bigquery| Permission | Required | What it does |
|---|---|---|
| Read datasets, tables, jobs | Yes | List datasets/tables, read schema + job history. |
| Apply approved cancel/delete | Optional | Cancel jobs + delete tables behind chat approval. |
Cloud Run Jobs
List jobs, trigger + track executions, read execution logs, cancel executions, update job config, delete jobs.
Show me my Google Cloud cloud run jobs| Permission | Required | What it does |
|---|---|---|
| Read jobs + executions | Yes | List jobs and read execution history + logs. |
| Apply approved trigger/update/delete | Optional | Trigger, update, delete behind a chat approval. |
Cloud Logging
List log buckets, sinks (CRUD), log-based metrics, exclusions, and search logs (capped at 100 entries).
Show me my Google Cloud cloud logging| Permission | Required | What it does |
|---|---|---|
| Read buckets, sinks, metrics | Yes | List buckets/sinks/metrics and search logs. |
| Apply approved sink changes | Optional | Create/update/delete sinks behind chat approval. |
Cloud Monitoring
List/read alert policies, enable/disable them, list notification channels, uptime checks, and dashboards.
Show me my Google Cloud cloud monitoring| Permission | Required | What it does |
|---|---|---|
| Read policies + checks | Yes | List alert policies, channels, uptime checks. |
| Apply approved policy toggles | Optional | Enable/disable policies behind chat approval. |
Cloud Alerting
List + create + end snoozes for alert policies. (Incidents are not exposed by a public REST API.)
Show me my Google Cloud cloud alerting| Permission | Required | What it does |
|---|---|---|
| Read snoozes | Yes | List active alert-policy snoozes. |
| Apply approved snoozes | Optional | Create/end snoozes behind a chat approval. |
Error Reporting
List error groups by frequency, read group detail + frequency, resolve/mute error groups.
Show me my Google Cloud error reporting| Permission | Required | What it does |
|---|---|---|
| Read error groups | Yes | List error groups and read frequency. |
| Apply approved resolve/mute | Optional | Resolve/mute groups behind a chat approval. |
Cloud IAM
Service accounts (CRUD + enable/disable), keys (list/create/delete; private key redacted), project IAM policy, roles.
Show me my Google Cloud cloud iam| Permission | Required | What it does |
|---|---|---|
| Read service accounts + policy | Yes | List service accounts, keys (metadata), IAM policy, roles. |
| Apply approved SA + key changes | Optional | SA + key lifecycle behind a chat approval. |
Workload Identity Federation
List/read identity pools + providers, enable/disable providers, delete pools.
Show me my Google Cloud workload identity federation| Permission | Required | What it does |
|---|---|---|
| Read pools + providers | Yes | List identity pools and read provider config. |
| Apply approved provider/pool changes | Optional | Toggle providers + delete pools behind approval. |