pod-gcloud.yaml

# Copyright 2025 Matheus Pimenta.
# SPDX-License-Identifier: AGPL-3.0

apiVersion: v1
kind: Pod
metadata:
  name: test-gcloud
  namespace: default
spec:
  serviceAccountName: <SERVICE_ACCOUNT>
  hostAliases:
  - hostnames: [metadata.google.internal]
    ip: 169.254.169.254
  restartPolicy: Never
  containers:
  - name: gcs
    image: google/cloud-sdk:561.0.0-slim
    command:
    - sh
    - -c
    - |
      # loop trying to create a new object in gs://gke-metadata-server-test with a random key and
      # content until it succeeds, then read the object back. delete the object, and finally,
      # if the content is different from the original, exit with an error code.
      while true; do
        key=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 32 | head -n 1)
        content=$(cat /dev/urandom | tr -dc 'a-zA-Z0-9' | fold -w 32 | head -n 1)
        echo $content > /tmp/$key
        if gcloud storage cp /tmp/$key gs://gke-metadata-server-test/$key; then
          break
        fi
      done
      gcloud storage cat gs://gke-metadata-server-test/$key > /tmp/${key}.2
      gcloud storage rm gs://gke-metadata-server-test/$key
      cat <<EOF
      Original content: $(cat /tmp/$key)
      Downloaded content: $(cat /tmp/${key}.2)
      EOF
      if diff /tmp/$key /tmp/${key}.2; then
        echo "Content match"
        exit 0
      fi
      echo "Content mismatch"
      exit 1
<NODE_SELECTOR>