kong
kong copied to clipboard
Support for IMDSv2
Summary
Full changelog
- Added support for IMDSv2 by fetching an IMDSv2 token prior to using it in subsequent Metadata Service requests
Issue reference
Fixes #8380
Hello @isavcic,
Thanks for your contribution! Could you change the test file https://github.com/Kong/kong/blob/master/spec/03-plugins/27-aws-lambda/03-iam-ec2-credentials_spec.lua as well so this new format is tested?
IMDSv2 is either optional or mandatory, but present on every instance where instance metadata access is enabled, AFAIK.
thx @isavcic for the feedback, that might indeed be the case.
Besides that, this comment also applies here; https://github.com/Kong/kong/pull/8732#issuecomment-1125971316
Closing this PR as I'll continue it as https://github.com/Kong/kong/pull/9962