From 60f46af69d314328b788954239665c58d27d8d6d Mon Sep 17 00:00:00 2001 From: chrischristiansen-glitch Date: Thu, 4 Jun 2026 19:56:09 +0000 Subject: [PATCH] fix(preflight): never force interactive ADC login on VM; use metadata service-account Powered by Jason, Crafted by Vauco --- scripts/preflight.sh | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/scripts/preflight.sh b/scripts/preflight.sh index 043df18..533b613 100755 --- a/scripts/preflight.sh +++ b/scripts/preflight.sh @@ -23,13 +23,18 @@ else exit 1 fi -# 2. ADC +# 2. ADC (Application Default Credentials) +# På en GCE-VM leveres ADC automatisk av metadata-serveren — ALDRI tving +# interaktiv 'gcloud auth application-default login' (browser-kode henger på VM). if gcloud auth application-default print-access-token >/dev/null 2>&1; then ok "ADC (application-default)" +elif curl -s -H "Metadata-Flavor: Google" \ + "http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token" \ + >/dev/null 2>&1; then + ok "ADC (VM metadata service-account)" else - warn "ADC ikke satt — kjører: gcloud auth application-default login --no-launch-browser" - gcloud auth application-default login --no-launch-browser \ - --scopes="https://www.googleapis.com/auth/cloud-platform" + warn "ADC ikke tilgjengelig. På VM: sjekk at instansen har en service-account." + warn "Manuelt (kun hvis nødvendig): gcloud auth application-default login" fi # 3. Prosjekt