[
https://issues.apache.org/jira/browse/CASSANDRA-16555?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17313860#comment-17313860
]
Paul Rütter (BlueConic) edited comment on CASSANDRA-16555 at 4/2/21, 1:00 PM:
------------------------------------------------------------------------------
Relevant cli command for creating an EC2 instance with the metadata service v1
disabled:
{code:java}
# aws --profile <profile> --region eu-west-1 ec2
modify-instance-metadata-options --instance-id <instance-id> --http-tokens
required --http-endpoint enabled
{
"InstanceId": "<instance id>",
"InstanceMetadataOptions": {
"State": "pending",
"HttpEndpoint": "enabled",
"HttpTokens": "required",
"HttpPutResponseHopLimit": 1
}
} {code}
was (Author: paul_blueconic):
Relevant code for creating an EC2 instance with the metadata service v1
disabled:
{code:java}
# aws --profile <profile> --region eu-west-1 ec2
modify-instance-metadata-options --instance-id <instance-id> --http-tokens
required --http-endpoint enabled
{
"InstanceId": "<instance id>",
"InstanceMetadataOptions": {
"State": "pending",
"HttpEndpoint": "enabled",
"HttpTokens": "required",
"HttpPutResponseHopLimit": 1
}
} {code}
> Add out-of-the-box snitch for Ec2 IMDSv2
> ----------------------------------------
>
> Key: CASSANDRA-16555
> URL: https://issues.apache.org/jira/browse/CASSANDRA-16555
> Project: Cassandra
> Issue Type: New Feature
> Components: Consistency/Coordination
> Reporter: Paul Rütter (BlueConic)
> Priority: Normal
> Time Spent: 10m
> Remaining Estimate: 0h
>
> In order to patch a vulnerability, Amazon came up with a new version of their
> metadata service.
> It's no longer unrestricted but now requires a token (in a header), in order
> to access the metadata service.
> See
> [https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html]
> for more information.
> Cassandra currently doesn't offer an out-of-the-box snitch class to support
> this.
> See
> [https://cassandra.apache.org/doc/latest/operating/snitch.html#snitch-classes]
> This issue asks to add support for this as a separate snitch class.
> We'll probably do a PR for this, as we are in the process of developing one.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscr...@cassandra.apache.org
For additional commands, e-mail: commits-h...@cassandra.apache.org
