Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-12964

Bootstrap on aws should have same metadata service type as on other nodes

XMLWordPrintable

    • No
    • False
    • Hide

      None

      Show
      None
    • Hide
      Previously, setting the `metadataService.authentication` field to `Required` when installing a cluster on AWS did not configure the bootstrap VM to use IMDSv2 authentication. This could result in installations failing if you configured your AWS account to block IMDSv1 authentication. With this update, the `metadataService.authentication` field correctly configures the bootstrap VM to use IMDSv2 authentication when set to `Required`. (link:https://issues.redhat.com/browse/OCPBUGS-12964[*OCPBUGS-12964*])
      Show
      Previously, setting the `metadataService.authentication` field to `Required` when installing a cluster on AWS did not configure the bootstrap VM to use IMDSv2 authentication. This could result in installations failing if you configured your AWS account to block IMDSv1 authentication. With this update, the `metadataService.authentication` field correctly configures the bootstrap VM to use IMDSv2 authentication when set to `Required`. (link: https://issues.redhat.com/browse/OCPBUGS-12964 [* OCPBUGS-12964 *])
    • Bug Fix
    • Done

      Description of problem:

      While installing ocp on aws user can set metadataService auth to Required in order to use IMDSv2, in that case user requires all the vms to use it. 
Currently bootstrap will always run with Optional and this can be blocked on users aws account and will fail the installation process

      Version-Release number of selected component (if applicable):

      4.14.0

      How reproducible:

      Install aws cluster and set metadataService to Required

      Steps to Reproduce:

      1.
2.
3.

      Actual results:

      Bootstrap has IMDSv2 set to optional

      Expected results:

      All vms had IMDSv2 set to required

      Additional info:

       

            itsoiref@redhat.com Igal Tsoiref
            itsoiref@redhat.com Igal Tsoiref
            Yunfei Jiang Yunfei Jiang
            Votes:
            1 Vote for this issue
            Watchers:
            13 Start watching this issue

              Created:
              Updated:
              Resolved: