3 ms·
Even Google's Go client for the GCE metadata uses an IP address: > Using a fixed IP makes it very difficult to spoof the metadata https://github.com/googleapi
by bradfitz 5y ago
Even Google's Go client for the GCE metadata uses an IP address:
> Using a fixed IP makes it very difficult to spoof the metadata
https://github.com/googleapis/google-cloud-go/commit/ae568912e42f2dd25f2c7cc8f34bc7ae2087eb15 https://github.com/googleapis/google-cloud-go/commit/ae56891...
- skj 5y agoHmm cloud build spoofs it :) if the customer build accessed the underlying VM's metadata it would be very confusing (though not a security issue). It was not straightforward. I learned a lot about iptables and docker networking.