"Your credentials may be visible to others with access to this virtual machine" - 这是什么意思?

"Your credentials may be visible to others with access to this virtual machine" - what does it mean?

我正在尝试做 gcloud compute scp ... 并且 gcloud auth login 有这条消息

You are running on a Google Compute Engine virtual machine. It is recommended that you use service accounts for authentication. You can run: $ gcloud config set account ACCOUNT to switch accounts if necessary.

Your credentials may be visible to others with access to this virtual machine. Are you sure you want to authenticate with your personal account?

  1. 他们指的凭据是什么? (电子邮件地址、IP、实例名称、服务帐户、IAM 角色...等等?)
  2. 凭据是否在某处记录和检索?
  3. 虽然它说其他人可以访问此 VM,但什么样的访问级别才能看到凭据?
  4. 凭据是加密的还是纯文本格式?
  5. 如果我们做一个机器镜像并从镜像创建一个实例,凭证也会被复制吗?

What are the credentials they refer to? (email address, IP, instance name, service accounts, IAM roles...etc?)

Google Cloud CLI 存储与您的主目录相关的凭据。这些凭据是 OAuth 令牌。这些令牌必须受到保护,因为它们代表身份和授权。

Are the credentials being logged and retrievable somewhere?

不,Google 没有记录凭据。但是,它们将存储在备份和快照中。

While it says is visible to others with access to this VM, what kind of access levels will be able to see the credentials?

任何拥有 sudo 权限的人。具有创建系统快照和映像的 IAM 权限的任何人。

Are the credentials encrypted or in plain text format?

纯文本。

If we do a machine image and create an instance from the image, will the credentials be copied too?

我没有亲身验证过,但我相信这是真的。