[[["易于理解","easyToUnderstand","thumb-up"],["解决了我的问题","solvedMyProblem","thumb-up"],["其他","otherUp","thumb-up"]],[["很难理解","hardToUnderstand","thumb-down"],["信息或示例代码不正确","incorrectInformationOrSampleCode","thumb-down"],["没有我需要的信息/示例","missingTheInformationSamplesINeed","thumb-down"],["翻译问题","translationIssue","thumb-down"],["其他","otherDown","thumb-down"]],["最后更新时间 (UTC)：2025-09-04。"],[[["\u003cp\u003eGoogle Distributed Cloud (GDC) air-gapped projects are central to managing GDC services, including API management, collaborator access, and resource permissions.\u003c/p\u003e\n"],["\u003cp\u003eUsers can view project details, such as metadata, and configurations, using the GDC console or the \u003ccode\u003egdcloud\u003c/code\u003e CLI.\u003c/p\u003e\n"],["\u003cp\u003eProject resources can be monitored, and user and group access policies can be checked to maintain segmentation within an organization.\u003c/p\u003e\n"],["\u003cp\u003eThe GDC console's project picker facilitates seamless transitions between parent resource types (organization or project) when accessing resources.\u003c/p\u003e\n"],["\u003cp\u003eWhile the GDC console may show an ability to edit project details, the only way to actually update a project's configuration, such as its name, is by using the \u003ccode\u003egdcloud\u003c/code\u003e CLI.\u003c/p\u003e\n"]]],[],null,["# Manage projects and their resources\n\nGoogle Distributed Cloud (GDC) air-gapped projects form the basis for creating, enabling,\nand using all GDC services including managing APIs,\nadding and removing collaborators, and managing permissions for\nGDC resources.\n\nThis page explains how to manage GDC projects using the\nGDC console, gdcloud CLI, and `kubectl` CLI.\n\nBefore you begin\n----------------\n\nTo get the permissions needed to edit an existing project or view a project's\nresources, ask your Organization IAM Admin to grant you the Project Editor role\n(`project-editor`).\n\nTo get the permissions needed to only view a project's resources without the\nability to edit the project, ask your Organization IAM Admin to grant you the\nProject Viewer role (`project-viewer`).\n\nTo use the gdcloud CLI, ensure you have it installed. For more\ninformation, see the gdcloud CLI\n[Overview](/distributed-cloud/hosted/docs/latest/gdch/resources/gdcloud-overview#download_and_install_the)\npage.\n\nView project details\n--------------------\n\nYou can view your project's metadata to review current configurations such as\nlabels and network settings. \n\n### Console\n\n1. Open the navigation menu and select **Projects**.\n\n2. Click the project you want to view details for.\n\n### gdcloud\n\nTo list the metadata for a specific project, run: \n\n gdcloud projects describe \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e\n\nReplace \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e with the unique identifier for\nyour project.\n\nCheck project resources\n-----------------------\n\nYou can check project resources to monitor the segmentation of resources within\nan organization. You can also check user and group access policies, which you\ndefine per project to provide boundaries between projects.\n\n### Check a cluster\n\nTo print information about a project's cluster, run: \n\n kubectl describe \u003cvar translate=\"no\"\u003eCLUSTER_NAME\u003c/var\u003e -n \u003cvar translate=\"no\"\u003eCLUSTER_NAMESPACE\u003c/var\u003e\n\nFor more information on attaching projects to a cluster, see\n[Move clusters in project hierarchy](/distributed-cloud/hosted/docs/latest/gdch/platform-application/pa-ao-operations/cluster#move-clusters).\n\n### List role bindings in a project\n\nTo list the role bindings in a project, run: \n\n kubectl get rolebindings -n \u003cvar translate=\"no\"\u003ePROJECT_NAMESPACE\u003c/var\u003e\n\nFor more information on project role bindings, see the\n[Assign a role binding to the service identity](/distributed-cloud/hosted/docs/latest/gdch/platform/pa-user/service-identity#assign_a_role_binding_to_the_service_identity)\ndocumentation.\n\nSelect a project or organization\n--------------------------------\n\nIn the GDC console, you can select a project or organization using the\nproject picker to interact with the service resources nested under that parent\nresource. For more information on how resources are organized, see the\n[GDC resource hierarchy](/distributed-cloud/hosted/docs/latest/gdch/resources/resource-hierarchy).\nFor example, a Kubernetes cluster is organization-scoped, whereas a virtual\nmachine (VM) is project-scoped.\n\nThe project picker automatically transitions between the most recent parent\nresource types when the context of the child resource changes. For example, when\nyou access a project-scoped resource when you have an organization selected in\nthe project picker, the picker automatically selects the last used project to\nseamlessly change the resource scope. Likewise, the organization is autoselected\nwhen accessing organization-scoped resources.\n| **Note:** If you've never chosen a project from the project picker when accessing a project-scoped resource, you must manually select a project from the dialog.\n\nTo interact with GDC resources nested in a parent\nresource, you must first select the organization or project to work in:\n\n1. From the dashboard, click the project picker drop-down.\n\n2. In the **Projects** window that appears, select your project or organization.\n\n3. Click **Open**.\n\nUpdate a project\n----------------\n\nThere are a subset of configurations for your project that can be updated after\ncreation, such as project name and data exfiltration protection. You can\nupdate these configurations as your usage of the project evolves.\n\nFor example, you can edit the project's name by completing the following steps: \n\n### Console\n\n1. Open the navigation menu and select **Projects**.\n\n2. Click the project you want to edit.\n\n3. Click edit **Edit** next\n to the **Project display name** field.\n\n4. Provide the updated project name and click **Save**.\n\n### gdcloud\n\nRun the following command: \n\n gdcloud projects update \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e --name=\u003cvar translate=\"no\"\u003ePROJECT_NAME\u003c/var\u003e\n\nReplace the following variables:\n\n- \u003cvar translate=\"no\"\u003ePROJECT_ID\u003c/var\u003e: the unique identifier for your project.\n- \u003cvar translate=\"no\"\u003ePROJECT_NAME\u003c/var\u003e: the new name for the project.\n\nYou can replace the `--name` parameter with any editable project field. Run\n`gdcloud projects update --help` for more options.\n\nView projects in an organization\n--------------------------------\n\nAs an Administrator, you can only view and list projects you have access to with\nIAM roles. The Organization IAM Admin role can view and list all projects in\nthe organization. \n\n### Console\n\nTo view all projects in an organization, go to the console's navigation menu\nand select **Projects**.\n\n### gdcloud\n\nTo view all projects you have access to in an organization, run: \n\n gdcloud projects list\n\nYou cannot list projects you do not have permission to access."]]
