From ee2cfc8b1368c72373bb300e7645cf4924931459 Mon Sep 17 00:00:00 2001
From: Peter Zhu <zhujiaxi@amazon.com>
Date: Wed, 10 Jul 2024 20:55:09 +0000
Subject: [PATCH] Ensure packer to provision EC2 instance with imdsv2 enabled

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
---
 packer/jenkins-agent-al2-arm64.json                | 5 +++++
 packer/jenkins-agent-al2-x64.json                  | 5 +++++
 packer/jenkins-agent-al2023-arm64.json             | 5 +++++
 packer/jenkins-agent-al2023-x64.json               | 5 +++++
 packer/jenkins-agent-macos12-x64.json              | 5 +++++
 packer/jenkins-agent-ubuntu2004-x64.json           | 5 +++++
 packer/jenkins-agent-win2019-x64-gradle-check.json | 5 +++++
 packer/jenkins-agent-win2019-x64.json              | 5 +++++
 8 files changed, 40 insertions(+)

diff --git a/packer/jenkins-agent-al2-arm64.json b/packer/jenkins-agent-al2-arm64.json
index 3e54c52b..b4b22fd0 100644
--- a/packer/jenkins-agent-al2-arm64.json
+++ b/packer/jenkins-agent-al2-arm64.json
@@ -36,6 +36,11 @@
         "most_recent":true
       },
       "associate_public_ip_address":false,
+      "metadata_options": {
+        "http_endpoint": "enabled",
+        "http_tokens": "required",
+        "http_put_response_hop_limit": 1
+      },
       "ssh_username":  "ec2-user",
       "ssh_timeout": "3h",
       "tags": {
diff --git a/packer/jenkins-agent-al2-x64.json b/packer/jenkins-agent-al2-x64.json
index 84f3e89d..ce6fa23d 100644
--- a/packer/jenkins-agent-al2-x64.json
+++ b/packer/jenkins-agent-al2-x64.json
@@ -36,6 +36,11 @@
         "most_recent":true
       },
       "associate_public_ip_address":false,
+      "metadata_options": {
+        "http_endpoint": "enabled",
+        "http_tokens": "required",
+        "http_put_response_hop_limit": 1
+      },
       "ssh_username":  "ec2-user",
       "ssh_timeout": "3h",
       "tags": {
diff --git a/packer/jenkins-agent-al2023-arm64.json b/packer/jenkins-agent-al2023-arm64.json
index 3d53b2f1..1715aacc 100644
--- a/packer/jenkins-agent-al2023-arm64.json
+++ b/packer/jenkins-agent-al2023-arm64.json
@@ -36,6 +36,11 @@
         "most_recent":true
       },
       "associate_public_ip_address":false,
+      "metadata_options": {
+        "http_endpoint": "enabled",
+        "http_tokens": "required",
+        "http_put_response_hop_limit": 1
+      },
       "ssh_username":  "ec2-user",
       "ssh_timeout": "3h",
       "tags": {
diff --git a/packer/jenkins-agent-al2023-x64.json b/packer/jenkins-agent-al2023-x64.json
index e12fba31..a1543c99 100644
--- a/packer/jenkins-agent-al2023-x64.json
+++ b/packer/jenkins-agent-al2023-x64.json
@@ -36,6 +36,11 @@
         "most_recent":true
       },
       "associate_public_ip_address":false,
+      "metadata_options": {
+        "http_endpoint": "enabled",
+        "http_tokens": "required",
+        "http_put_response_hop_limit": 1
+      },
       "ssh_username":  "ec2-user",
       "ssh_timeout": "3h",
       "tags": {
diff --git a/packer/jenkins-agent-macos12-x64.json b/packer/jenkins-agent-macos12-x64.json
index 7b7027da..33e28759 100644
--- a/packer/jenkins-agent-macos12-x64.json
+++ b/packer/jenkins-agent-macos12-x64.json
@@ -42,6 +42,11 @@
         "most_recent":true
       },
       "associate_public_ip_address":false,
+      "metadata_options": {
+        "http_endpoint": "enabled",
+        "http_tokens": "required",
+        "http_put_response_hop_limit": 1
+      },
       "ssh_username":  "ec2-user", 
       "ssh_timeout": "3h",
       "tenancy": "host",
diff --git a/packer/jenkins-agent-ubuntu2004-x64.json b/packer/jenkins-agent-ubuntu2004-x64.json
index e4d32ce5..11864024 100644
--- a/packer/jenkins-agent-ubuntu2004-x64.json
+++ b/packer/jenkins-agent-ubuntu2004-x64.json
@@ -36,6 +36,11 @@
         "most_recent":true
       },
       "associate_public_ip_address":false,
+      "metadata_options": {
+        "http_endpoint": "enabled",
+        "http_tokens": "required",
+        "http_put_response_hop_limit": 1
+      },
       "ssh_username":  "ubuntu",
       "ssh_timeout": "3h",
       "tags": {
diff --git a/packer/jenkins-agent-win2019-x64-gradle-check.json b/packer/jenkins-agent-win2019-x64-gradle-check.json
index 2c87eaf3..d4e84170 100644
--- a/packer/jenkins-agent-win2019-x64-gradle-check.json
+++ b/packer/jenkins-agent-win2019-x64-gradle-check.json
@@ -37,6 +37,11 @@
       },
       "user_data_file":"scripts/windows/userdata.ps1",
       "associate_public_ip_address":false,
+      "metadata_options": {
+        "http_endpoint": "enabled",
+        "http_tokens": "required",
+        "http_put_response_hop_limit": 1
+      },
       "communicator":"winrm",
       "winrm_username":"Administrator",
       "winrm_timeout":"40m",
diff --git a/packer/jenkins-agent-win2019-x64.json b/packer/jenkins-agent-win2019-x64.json
index 5e16483e..10694396 100644
--- a/packer/jenkins-agent-win2019-x64.json
+++ b/packer/jenkins-agent-win2019-x64.json
@@ -36,6 +36,11 @@
         "most_recent":true
       },
       "user_data_file":"scripts/windows/userdata.ps1",
+      "metadata_options": {
+        "http_endpoint": "enabled",
+        "http_tokens": "required",
+        "http_put_response_hop_limit": 1
+      },
       "associate_public_ip_address":false,
       "communicator":"winrm",
       "winrm_username":"Administrator",