GoogleCloudPlatform / GoogleCloudPlatform/gsutil
gsutil needs access to the instance's metadata
- Dominant language
- Python
- Stars
- 918
- Forks
- 335
- PR merge metrics
- No merged PRs in 30d
Description
Hi! We have faced with strange behaviour. gsutil needs to access to the instance's metadata, otherwise it's throwing exception:
`apitools.base.py.exceptions.ResourceUnavailableError: GCE credentials requested outside a GCE instance`
We do not want to provide access to metadata for everyone according to https://cloud.google.com/iam/docs/best-practices-for-securing-service-accounts#metadata-server-acccess
It reproduces only on GCP boxes. On AWS boxes works properly.
gsutil version: 4.65
5.3 - the same.
Contributor guide
Research direction
Start by reproducing the exception on a GCP box with gsutil 4.65 or 5.3, then trace how GCE credentials access the instance metadata. Compare this behavior with the working AWS-box case and verify that the resulting behavior does not require metadata access for everyone.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- gcp, python
- Domain
- authentication, cli, cloud
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100