search

opensearch-project / OpenSearch

🔎 Open source distributed and RESTful search engine.
https://opensearch.org/docs/latest/opensearch/index/
Apache License 2.0
9.89k stars 1.84k forks source link

Upgrade EC2 discovery plugin to use IMDSv2 #3040

Open Bukhtawar opened 2 years ago

Bukhtawar commented 2 years ago

Is your feature request related to a problem? Please describe.

IMDSv2 introduces a number of security improvements over IMDSv1.

Describe the solution you'd like

Following upgrade to AWS SDK v2 in https://github.com/opensearch-project/OpenSearch/pull/7372, upgrade use of IMDSv1 to v2.

Additional context

See https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html

Bukhtawar commented 1 year ago

Closing in favour of https://github.com/opensearch-project/OpenSearch/issues/7916

dblock commented 1 year ago

Let's reopen this one since it was here earlier!

shurkus commented 6 months ago

Hello! Any news?

dblock commented 6 months ago

Hello! Any news?

AFAIK nobody is working on this. The SDK was upgraded, but support for IMDSv2 hasn't been added/tested. Want to help @shurkus?