Repository navigation
Conversation
…ta emulators LUCI's local auth server (exported via GCE_METADATA_HOST by luci-auth context on Swarming) only serves tokens and a few project/instance values. Since #5479, is_gce() honours GCE_METADATA_HOST and only checks for a TCP connection, so Swarming bots were treated as GCE and crashed fetching instance/zone (404). Probe instance/id instead, which real GCE and the test emulator serve but LUCI's emulator does not. Bug: b/571127789
IvanBM18
added this pull request to stack #5537
October 7, 2026 23:50
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Recent changes made it so we can know overide the gce metadata host, which helps when we want to add a fake server in its place, but this broke CF running on swarming bos, because there we have a server that mint's tokens, which fools CF to believe that it is in gce, when is not.
So now we introduce a more strict is_gce() check that only true metadata servers can answer.
More info in #5535
Tests