From fbdbf14552f056bc48e209c07c56022f2967ae2d Mon Sep 17 00:00:00 2001
From: Chris Christiansen <chris.christian...@>
Date: Sat, 30 May 2026 14:47:15 +0000
Subject: [PATCH] fix(opax): accept GCE VM metadata credentials for ADC check

---
 scripts/opax.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/opax.sh b/scripts/opax.sh
index 7a2a487..d69e587 100644
--- a/scripts/opax.sh
+++ b/scripts/opax.sh
@@ -68,7 +68,7 @@ if [[ -z "${OPAX_LOADED-}" ]]; then
               true
 
     run_check "Application Default Credentials (ADC)" \
-              "gcloud auth application-default print-access-token --quiet" \
+              "curl -sf -H 'Metadata-Flavor: Google' 'http://metadata.google.internal/computeMetadata/v1/instance/service-accounts/default/token' | grep -q access_token || gcloud auth application-default print-access-token --quiet" \
               "Run: gcloud auth application-default login" \
               true