Switch to IMDSv2 and boto3

zalando / spilo

Highly available elephant herd: HA PostgreSQL cluster using Docker

Apache License 2.0

1.51k stars 371 forks source link

Switch to IMDSv2 and boto3 #967

Open idanovinda opened 5 months ago

idanovinda commented 5 months ago

retrieve and add token to the curl request headers to replace the usage of IMDSv1 to IMDSv2
replace boto with boto3 library

laiminhtrung1997 commented 2 months ago

Dear all, If I followed the best practices for security, the spilo container's pod could not access IMDS anymore. So I have to configure the pod to run as hostNetwork so that it can access IMDS. What do you guys think about this scenario?