Hacker News new | ask | show | jobs
by Rotten194 2133 days ago
GCE uses this tool to allow a central metadata server to manage users: https://github.com/GoogleCloudPlatform/guest-agent#account-m...

The host VM had this running. Since they had access to the host's network (due to running in a `--network=host` container), they were able to spoof the response from the metadata server to say a new user should be added to `.authorized_keys`, with their supplied public key. The guest agent automatically adds the new users to the `sudoers` group, also giving them sudo access.
1 comments
SteveNuts 2133 days ago
I'm curious why this host would have this running on it? Do GCP VMs co-locate with cloud SQL instances? I'd think it'd be separate infrastructure but maybe Google is just really good at binpacking (likely).
link
azurezyq 2133 days ago
Cloud sql instances actually running on GCE VMs, as suggested by the post, which makes sense as well.
link