You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Paul Rütter (BlueConic Jira)" <ji...@apache.org> on 2021/04/02 13:00:00 UTC
[jira] [Comment Edited] (CASSANDRA-16555) Add out-of-the-box snitch
for Ec2 IMDSv2
[ https://issues.apache.org/jira/browse/CASSANDRA-16555?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17313860#comment-17313860 ]
Paul Rütter (BlueConic) edited comment on CASSANDRA-16555 at 4/2/21, 12:59 PM:
-------------------------------------------------------------------------------
Relevant code for creating an EC2 instance with the metadata service v1 disabled:
{code:java}
# aws --profile <profile> --region eu-west-1 ec2 modify-instance-metadata-options --instance-id <instance-id> --http-tokens required --http-endpoint enabled
{
"InstanceId": "<instance id>",
"InstanceMetadataOptions": {
"State": "pending",
"HttpEndpoint": "enabled",
"HttpTokens": "required",
"HttpPutResponseHopLimit": 1
}
} {code}
was (Author: paul_blueconic):
Relevant code for creating an EC2 instance with the metadata service v1 disabled:
{code:java}
# aws --profile <profile> --region eu-west-1 ec2 modify-instance-metadata-options --instance-id <instance-id> --http-tokens required --http-endpoint enabled
{
"InstanceId": "i-0a7a45d2ec08960b9",
"InstanceMetadataOptions": {
"State": "pending",
"HttpEndpoint": "enabled",
"HttpTokens": "required",
"HttpPutResponseHopLimit": 1
}
} {code}
> Add out-of-the-box snitch for Ec2 IMDSv2
> ----------------------------------------
>
> Key: CASSANDRA-16555
> URL: https://issues.apache.org/jira/browse/CASSANDRA-16555
> Project: Cassandra
> Issue Type: New Feature
> Components: Consistency/Coordination
> Reporter: Paul Rütter (BlueConic)
> Priority: Normal
> Time Spent: 10m
> Remaining Estimate: 0h
>
> In order to patch a vulnerability, Amazon came up with a new version of their metadata service.
> It's no longer unrestricted but now requires a token (in a header), in order to access the metadata service.
> See [https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html] for more information.
> Cassandra currently doesn't offer an out-of-the-box snitch class to support this.
> See [https://cassandra.apache.org/doc/latest/operating/snitch.html#snitch-classes]
> This issue asks to add support for this as a separate snitch class.
> We'll probably do a PR for this, as we are in the process of developing one.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@cassandra.apache.org
For additional commands, e-mail: commits-help@cassandra.apache.org