kong icon indicating copy to clipboard operation
kong copied to clipboard

Support for IMDSv2

Open isavcic opened this issue 2 years ago • 4 comments

Summary

Full changelog

  • Added support for IMDSv2 by fetching an IMDSv2 token prior to using it in subsequent Metadata Service requests

Issue reference

Fixes #8380

isavcic avatar Feb 08 '22 17:02 isavcic

CLA assistant check
All committers have signed the CLA.

CLAassistant avatar Feb 08 '22 17:02 CLAassistant

Hello @isavcic,

Thanks for your contribution! Could you change the test file https://github.com/Kong/kong/blob/master/spec/03-plugins/27-aws-lambda/03-iam-ec2-credentials_spec.lua as well so this new format is tested?

dndx avatar Mar 22 '22 16:03 dndx

IMDSv2 is either optional or mandatory, but present on every instance where instance metadata access is enabled, AFAIK.

isavcic avatar May 13 '22 12:05 isavcic

thx @isavcic for the feedback, that might indeed be the case.

Besides that, this comment also applies here; https://github.com/Kong/kong/pull/8732#issuecomment-1125971316

Tieske avatar May 13 '22 12:05 Tieske

Closing this PR as I'll continue it as https://github.com/Kong/kong/pull/9962

hanshuebner avatar Dec 14 '22 10:12 hanshuebner