Project

General

Profile

Actions

Bug #21585

closed

Installer's Terraform code sets IMDSv2 to required on EC2 service nodes

Added by Lucas Di Pentima 8 months ago. Updated 8 months ago.

Status:
Resolved
Priority:
Normal
Assigned To:
Category:
Deployment
Story points:
-
Release relationship:
Auto

Description

This is related to #21552, terraform should set service nodes instances IMDSv2 to required.

See: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance#http_tokens


Subtasks 1 (0 open1 closed)

Task #21586: Review 21585-installer-imdsv2ResolvedLucas Di Pentima03/13/2024Actions
Actions #2

Updated by Lucas Di Pentima 8 months ago

  • Description updated (diff)
Actions #3

Updated by Lucas Di Pentima 8 months ago

  • Subject changed from Installer's Terraform code sets IMDSv2 to required on EC2 instance on AWS deployments to Installer's Terraform code sets IMDSv2 to required on EC2 service nodes
Actions #4

Updated by Lucas Di Pentima 8 months ago

  • Status changed from New to In Progress
Actions #5

Updated by Lucas Di Pentima 8 months ago

21585-installer-imdsv2 @ f10e92fe09

  • All agreed upon points are implemented / addressed.
    • Yes
  • Anything not implemented (discovered or discussed during work) has a follow-up story.
    • No
  • Code is tested and passing, both automated and manual, what manual testing was done is described
    • Have already applied this on running clusters. The change is trivial and doesn't modify existing cloud resources in a way that they need to be recreated.
  • Documentation has been updated.
    • No. This is implemented as default (although manually overridable by people who can read Terraform code). Being that IMDSv2 is a feature that exists for around 3 years and it's recommended for security reasons by AWS, I don't see the point of documenting it if there's no apparent reason to disable it.
  • Behaves appropriately at the intended scale (describe intended scale).
    • N/A
  • Considered backwards and forwards compatibility issues between client and server.
    • N/A
  • Follows our coding standards and GUI style guidelines.
    • Yes
Actions #6

Updated by Brett Smith 8 months ago

Lucas Di Pentima wrote in #note-5:

21585-installer-imdsv2 @ f10e92fe09

LGTM, thank you.

Actions #7

Updated by Lucas Di Pentima 8 months ago

  • Status changed from In Progress to Resolved
Actions

Also available in: Atom PDF