GCE Windows: Use authenticated HTTP GET against GCS if VM has cloud-platform scope.

This commit is contained in:
Jeremy Edwards 2021-04-15 23:30:19 +00:00
parent 1fc5eb3bf2
commit c22f001a1b

View File

@ -248,7 +248,7 @@ function Get-RemoteFile {
$httpResponseMessage.Wait()
if (-not $httpResponseMessage.IsCanceled) {
# Check if the request was successful.
#
#
# DO NOT replace with EnsureSuccessStatusCode(), it prints the
# OAuth2 bearer token.
if (-not $httpResponseMessage.Result.IsSuccessStatusCode) {
@ -295,7 +295,7 @@ function Check-StorageScope {
While($true) {
$data = Get-InstanceMetadata -Key "service-accounts/default/scopes"
if ($data) {
return ($data -match "auth/devstorage")
return ($data -match "auth/devstorage") -or ($data -match "auth/cloud-platform")
}
Start-Sleep -Seconds 1
}