Jira (FACT-3042) Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration
Title: Message Title Christine Yoon updated an issue Facter / FACT-3042 Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration Change By: Christine Yoon Labels: doc docs -reviewed Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.399711.1621283832000.61323.1624300980096%40Atlassian.JIRA.
Jira (FACT-3042) Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration
Title: Message Title Christine Yoon updated an issue Facter / FACT-3042 Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration Change By: Christine Yoon Labels: doc_reviewed doc-reviewed Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.399711.1621283832000.61249.1624300080233%40Atlassian.JIRA.
Jira (FACT-3042) Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration
Title: Message Title Christine Yoon updated an issue Facter / FACT-3042 Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration Change By: Christine Yoon Labels: doc_reviewed Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.399711.1621283832000.60922.1624285260148%40Atlassian.JIRA.
Jira (FACT-3042) Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration
Title: Message Title Mihai Buzgau updated an issue Facter / FACT-3042 Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration Change By: Mihai Buzgau Fix Version/s: FACT 4.2.1 Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.399711.1621283832000.57688.1623829500047%40Atlassian.JIRA.
Jira (FACT-3042) Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration
Title: Message Title Gheorghe Popescu assigned an issue to Gheorghe Popescu Facter / FACT-3042 Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration Change By: Gheorghe Popescu Assignee: Gheorghe Popescu Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.399711.1621283832000.37260.1621506660043%40Atlassian.JIRA.
Jira (FACT-3042) Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration
Title: Message Title Ciprian Badescu updated an issue Facter / FACT-3042 Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration Change By: Ciprian Badescu Story Points: 2 Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.399711.1621283832000.36169.1621414860035%40Atlassian.JIRA.
Jira (FACT-3042) Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration
Title: Message Title Mihai Buzgau updated an issue Facter / FACT-3042 Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration Change By: Mihai Buzgau Team: Night's Watch Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.399711.1621283832000.35067.1621348500150%40Atlassian.JIRA.
Jira (FACT-3042) Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration
Title: Message Title Mihai Buzgau updated an issue Facter / FACT-3042 Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration Change By: Mihai Buzgau Sprint: NW-2021-06-02 Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.399711.1621283832000.35063.1621348320029%40Atlassian.JIRA.
Jira (FACT-3042) Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration
Title: Message Title Charlie Sharpsteen commented on FACT-3042 Re: Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration The AWS SDKs approach this situation by always using IMDSv2 and falling back to IMDSv1: The AWS SDKs use IMDSv2 calls by default. If the IMDSv2 call receives no response, the SDK retries the call and, if still unsuccessful, uses IMDSv1. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instancedata-data-retrieval.html#imds-considerations This is also the approach Ohai takes when gathering ec2_metadata by always including the X-aws-ec2-metadata-token header, even if empty: https://github.com/chef/ohai/blob/v17.1.0/lib/ohai/mixin/ec2_metadata.rb#L121 Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.399711.1621283832000.34427.1621284180023%40Atlassian.JIRA.
Jira (FACT-3042) Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration
Title: Message Title Charlie Sharpsteen updated an issue Facter / FACT-3042 Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration Change By: Charlie Sharpsteen Affects Version/s: FACT 4.0.47 Add Comment This message was sent by Atlassian Jira (v8.13.2#813002-sha1:c495a97) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.399711.1621283832000.34424.1621283880121%40Atlassian.JIRA.
Jira (FACT-3042) Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration
Title: Message Title Charlie Sharpsteen created an issue Facter / FACT-3042 Facter should retrieve EC2 metadata using IMDSv2 without requring user configuration Issue Type: Improvement Assignee: Unassigned Created: 2021/05/17 1:37 PM Priority: Normal Reporter: Charlie Sharpsteen FACT-2306 introduced support for v2 of the EC2 Instance Meta Data Service. However, this support has to be explicitly enabled by setting the AWS_IMDSv2 environment variable to true. The environment variable requirement creates two points of friction: Using an environment variable instead of an entry in the Facter configuration makes it easy to get differing behavior depending on execution context. The environment that the puppet service receives is configured with a different set of files from that of a user shell which leads to inconsistent behavior. Requiring an environment variable makes AWS instances with HttpTokens=required special in that they require post-installation configuration that existing installation methods, like the puppet_agent module or PE install scripts, do not automate. If possible, Facter should use IMDSv2 automatically when available. Otherwise, Facter should allow IMDSv2 to be controlled by a configuration setting.
