[
https://issues.apache.org/jira/browse/CASSANDRA-16555?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17730496#comment-17730496
]
Stefan Miklosovic commented on CASSANDRA-16555:
-----------------------------------------------
I was talking to [~jlewandowski] privately about this ticket. He is fine with
me trying to move this forward. We were mostly discussing how to test this
feature. Jacek mentioned three approaches:
1) [https://github.com/aws/amazon-ec2-metadata-mock]
This needs to be started as a Docker service which does not play nicely with
our CI as that would be basically docker-in-docker situation.
2)
[https://github.com/http4k/http4k-connect/tree/master/amazon/instancemetadata]
this is supporting v1 of metadata at the moment. We would need to implement v2
ourselves ... to much work.
3) [https://github.com/wiremock/wiremock]
This seems to be the most approachable, we would mock what would metadata
service return to us, even a token is some expired one ... it would also enable
us to test failures etc.
I will try to go with as that seems to be the most promising.
I am sorry this takes so much time to deliver but it is how it is ...
> Add out-of-the-box snitch for Ec2 IMDSv2
> ----------------------------------------
>
> Key: CASSANDRA-16555
> URL: https://issues.apache.org/jira/browse/CASSANDRA-16555
> Project: Cassandra
> Issue Type: New Feature
> Components: Consistency/Coordination
> Reporter: Paul Rütter (BlueConic)
> Assignee: Stefan Miklosovic
> Priority: Normal
> Fix For: 3.0.x, 3.11.x, 4.0.x, 4.1.x, 5.x
>
> Time Spent: 1h 40m
> Remaining Estimate: 0h
>
> In order to patch a vulnerability, Amazon came up with a new version of their
> metadata service.
> It's no longer unrestricted but now requires a token (in a header), in order
> to access the metadata service.
> See
> [https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html]
> for more information.
> Cassandra currently doesn't offer an out-of-the-box snitch class to support
> this.
> See
> [https://cassandra.apache.org/doc/latest/operating/snitch.html#snitch-classes]
> This issue asks to add support for this as a separate snitch class.
> We'll probably do a PR for this, as we are in the process of developing one.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]