[ 
https://issues.apache.org/jira/browse/CASSANDRA-16555?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17730496#comment-17730496
 ] 

Stefan Miklosovic commented on CASSANDRA-16555:
-----------------------------------------------

I was talking to [~jlewandowski]  privately about this ticket. He is fine with 
me trying to move this forward. We were mostly discussing how to test this 
feature. Jacek mentioned three approaches:

1) [https://github.com/aws/amazon-ec2-metadata-mock]

This needs to be started as a Docker service which does not play nicely with 
our CI as that would be basically docker-in-docker situation.

2) 
[https://github.com/http4k/http4k-connect/tree/master/amazon/instancemetadata]

this is supporting v1 of metadata at the moment. We would need to implement v2 
ourselves ... to much work.

3) [https://github.com/wiremock/wiremock]

This seems to be the most approachable, we would mock what would metadata 
service return to us, even a token is some expired one ... it would also enable 
us to test failures etc.

I will try to go with as that seems to be the most promising.

I am sorry this takes so much time to deliver but it is how it is ...

> Add out-of-the-box snitch for Ec2 IMDSv2
> ----------------------------------------
>
>                 Key: CASSANDRA-16555
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-16555
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Consistency/Coordination
>            Reporter: Paul Rütter (BlueConic)
>            Assignee: Stefan Miklosovic
>            Priority: Normal
>             Fix For: 3.0.x, 3.11.x, 4.0.x, 4.1.x, 5.x
>
>          Time Spent: 1h 40m
>  Remaining Estimate: 0h
>
> In order to patch a vulnerability, Amazon came up with a new version of their 
> metadata service.
> It's no longer unrestricted but now requires a token (in a header), in order 
> to access the metadata service.
> See 
> [https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html]
>  for more information.
> Cassandra currently doesn't offer an out-of-the-box snitch class to support 
> this.
> See 
> [https://cassandra.apache.org/doc/latest/operating/snitch.html#snitch-classes]
> This issue asks to add support for this as a separate snitch class.
> We'll probably do a PR for this, as we are in the process of developing one.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to