Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable IMDSv2 for ManagedNodeGroup resources #1146

Merged
merged 8 commits into from
May 21, 2024
Merged

Conversation

rquitales
Copy link
Member

@rquitales rquitales commented May 10, 2024

Proposed changes

Exposes a new option for ManagedNodeGroups to enable IMDSv2. This PR is stacked on top of #1131 which allows the creation of a LaunchTemplate to implement these features.

Manual testing was done to ensure that we can create a ManagedNodeGroup with IMDSv2 enabled using instructions from: https://stackoverflow.com/questions/64595032/how-to-tell-what-version-of-instance-metadata-serviceimds-ec2-instance-is-usin

Related issues (optional)

Fixes: #682

@rquitales rquitales changed the title Rquitales/enable imdsv2 Enable IMDSv2 for ManagedNodeGroup resources May 10, 2024
Copy link

Does the PR have any schema changes?

Looking good! No breaking changes found.
No new resources/functions.

@rquitales rquitales force-pushed the rquitales/enable-imdsv2 branch from c0c4e53 to cebac37 Compare May 17, 2024 20:27
Copy link

Does the PR have any schema changes?

Looking good! No breaking changes found.
No new resources/functions.

@blampe blampe changed the base branch from master to rquitales/managed-addons May 17, 2024 22:10
@blampe blampe changed the base branch from rquitales/managed-addons to master May 17, 2024 22:11
nodejs/eks/babel.config.js Show resolved Hide resolved
return `#!/bin/bash
// If the user specifies either kubeletExtraArgs or bootstrapExtraArgs, we need to create a base64 encoded user data script.
if (args.kubeletExtraArgs || args.bootstrapExtraArgs) {
const kubeletExtraArgs = args.kubeletExtraArgs ? args.kubeletExtraArgs.split(" ") : [];
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unrelated - I think you want to strip this in case you get something like " foo ".

nodejs/eks/nodegroup.ts Outdated Show resolved Hide resolved
Copy link

Does the PR have any schema changes?

Looking good! No breaking changes found.
No new resources/functions.

@rquitales rquitales force-pushed the rquitales/enable-imdsv2 branch from 96962fc to c4ef227 Compare May 21, 2024 16:51
Copy link

Does the PR have any schema changes?

Looking good! No breaking changes found.
No new resources/functions.

@rquitales rquitales merged commit b6200bb into master May 21, 2024
40 of 41 checks passed
@rquitales rquitales deleted the rquitales/enable-imdsv2 branch May 21, 2024 18:06
flostadler pushed a commit that referenced this pull request Sep 4, 2024
### Proposed changes
Exposes a new option for ManagedNodeGroups to enable IMDSv2. This PR is
stacked on top of #1131 which allows the creation of a LaunchTemplate to
implement these features.

Manual testing was done to ensure that we can create a ManagedNodeGroup
with IMDSv2 enabled using instructions from:
https://stackoverflow.com/questions/64595032/how-to-tell-what-version-of-instance-metadata-serviceimds-ec2-instance-is-usin

### Related issues (optional)

Fixes: #682
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Support for EKS IMDSv2
2 participants