[LIBCLOUD-625] GCE: When used on a GCE instance, auth should use metadata tokens

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Component/s: Compute

Environment

Google Compute Engine

• Assignee: Unassigned
• Reporter: Eric Johnson
• Created: 17/Oct/14 14:09
• Updated: 28/Oct/14 11:43
• Resolved: 22/Oct/14 12:46

Description

Currently, the GCE driver only supports authorization from a perspective that code is executed "outside" of the GCE environment. However, if code is executed on an instance running "inside" GCE, it is possible to handle authorization with GCE's internal metadata service for an access token.

When an instance is created with appropriate service account scopes, this access token can be used to provide authorization to access the corresponding Google Cloud services.

https://cloud.google.com/compute/docs/authentication