A directory of custom metadata values passed to the VMs in your project during startup or shutdown. These custom values can either be Google Cloud attributes or user-created metadata values.

For a list of project-level Google Cloud attributes that you can set, seeProject attributes.

For more information about setting custom metadata, seeSet custom metadata.

Disables legacy metadata server endpoints for all VMs in your project.

Legacy endpoints are deprecated, always setdisable-legacy-endpoints=TRUE.

Sets guest attributes for the project.

Guest attributes are custom VM instance metadata values that you can use to publish infrequent status notifications, low volume data, or low frequency data. These values are useful for indicating when startup scripts have finished or for providing other infrequent status notifications to other applications.

For more information about guest attributes, seeSet and query guest attributes.

Enables or disables OS inventory for the project.

Collects and stores OS information. This includes information such as hostname, kernel version, architecture, and installed packages.

For more information about OS inventory, seeView operating system details.

Enables or disables SSH key management on your project.

For more information about OS Login, seeSet up OS Login.

This product or feature is subject to the "Pre-GA Offerings Terms" in the General Service Terms section of theService Specific Terms. Pre-GA products and features are available "as is" and might have limited support. For more information, see thelaunch stage descriptions.

Enables or disables SSH for Windows VMs.

For more information, seeConnect to Windows VMs using SSH.

If set, stores the default option that is used to back up new instances created in the project.

For more information, seeConfigure the default backup setting for the console.

For more information about setting default regions, seeDefault region and zone.

For more information about setting default zones, seeDefault region and zone.

If you aremanaging SSH keys using metadata, this attribute lets you configure public SSH keys that can connect to VMs in this project. If there are multiple SSH keys, each key is separated by a newline character (\n). The value of thessh-keys attribute is a string.

Example:"user1:ssh-rsa mypublickey user1@host.com\nuser2:ssh-rsa mypublickey user2@host.com"

SSH keys managed byOS Login aren't visible in metadata.

Enable zonal DNS and global DNS for the VMs in your project.

For more information about using zonal DNS names for your VMs, seeUse Zonal DNS for your internal DNS type.

A directory of custom metadata values passed to the VM during startup or shutdown. These custom values can either be Google Cloud attributes or user-created metadata values.

For a list of instance-level Google Cloud attributes that you can set, seeInstance attributes

For more information about setting custom metadata, seeSet custom metadata.

CPU platform of the VM.

For information about CPU platforms, seeCPU platforms.

A directory of disks that are attached to the VM. For each disk, the following information is available:

• device-name
• index
• interface
• mode
• type

For more information about disks, seeStorage options.

Stores the following endpoints for the managed workload identities feature used by applications running in the VM.

• config-status: Contains any errors in the configuration values provided through the VM metadata.
• workload-identities: Contains the identities managed by the Compute Engine control plane. This endpoint contains the X.509 certificate and the private key for the VM's trust domain.
• trust-anchors: Contains a set of trusted certificates for peer X.509 certificate chain validation.

For more information, seeAuthenticate workloads to other workloads over mTLS.

Sets guest attributes for the VM. These custom values can either be Google Cloud attributes or user-created metadata values.

For a list of instance-level Google Cloud attributes that you can set, seeInstance guest attributes

For more information about guest attributes, seeSet and query guest attributes.

A directory of network interfaces. For each network interface the following information is available:

• access-configs/

  • external-ip
  • type
• dns-servers
• forwarded-ips/
• gateway
• ip
• ip-aliases/
• mac
• mtu
• network
• subnetmask
• target-instance-ips

For more information about network interfaces, seeMultiple network interfaces overview.

A directory containing namespaces within which metadata entries are stored. The namespaces are created by Google Cloud services, which use partner-attributes to store their configurations. When there are no services using the partner-attributes, the directory is empty.

For example,managed workload identities use partner-attributes for its configurations.

A boolean value that indicates whether a VM is about to be preempted.

Sets the scheduling options for the VM.

Scheduling metadata values include the following:

• on-host-maintenance: indicates whether the VM terminates or live migrates during host maintenance.
• automatic-restart: If this value isTRUE, the VM automatically restarts after a maintenance event or crash.
• preemptible: If this value isTRUE, the VM is preemptible. This value is set when you create a VM, and it can't be changed.

For more information about scheduling options, seeSet instance availability policies.

A directory of service accounts associated with the VM. For each service account, the following information is available:

• aliases
• email: The email address for the service account.
• identity: A JSON Web Token that is unique to the VM. You must include theaudience parameter in your request for this VM metadata value. For example,?audience=http://www.example.com.

  For information about how to request and verify instance identity tokens, seeVerify VM identity.

• scopes: The access scopes assigned to the service account.
• token: TheOAuth2 access token that can be used to authenticate applications.

  For information about access tokens, see Authenticating applications directly with access tokens.

For more information about how Compute Engine uses service accounts, seeService accounts.

Lists any network tags associated with the VM.

For more information about network tags, seeAdd network tags.

The accumulated drift of the VM clock. Initialized to zero during instance creation and increased by the accumulated clock skew as the VMlive migrates.

A hash string that represents the location of a VM created with a compact placement policy.

For more information about this attribute, seeVerify the physical location of a VM.

Enables or disables SSH key management on your VM.

For more information about OS Login, seeSet up OS Login.

Enables or disables SSH for Windows VMs.

For more information, seeConnect to Windows VMs using SSH.

Enables or disables managed workload identities on a VM.

For more information, seeEnable managed workload identities for individual VMs.

Enable zonal DNS and global DNS for the VM.

For more information about using zonal DNS names for your VMs DNS, seeUse Zonal DNS for your internal DNS type.

If you aremanaging SSH keys using metadata, this attribute lets you configure public SSH keys that can connect to VMs in this project. If there are multiple SSH keys, each key is separated by a newline character (\n). The value of thessh-keys attribute is a string.

Example:"user1:ssh-rsa mypublickey user1@host.com\nuser2:ssh-rsa mypublickey user2@host.com"

SSH keys managed byOS Login aren't visible in metadata.

Block project SSH keys from VMs that use metadata-based SSH keys.

For more information, see Restrict SSH keys from VMs.

Disables automatic HTTPS Metadata Server certificate provisioning by Compute Engine.

For more information, see Enable automatic certificate setup.

Enables Compute Engine to add the root certificate to the OS trust store during automatic HTTPS Metadata Server certificate provisioning.

For more information, see Enabling root certificate storage in OS trust store.

Stores OS inventory for the VM.

Collects and stores OS details information. This includes information such as hostname, kernel version, architecture, and installed packages details.

For more information about OS inventory, seeView operating system details.

Stores SSH host keys. Host keys can be used to identify a particular host or machine.

For information host keys, seeStoring host keys by enabling guest attributes.