User Story

As a CAPI user, i would like to leverage an enhanced metadata security feature known as IMDSv2

Background

This thing was implemented and using now in Openshift Machine API:

https://issues.redhat.com/browse/OCPCLOUD-1436

https://github.com/openshift/machine-api-provider-aws/pull/34

There is also a demand to have this upstream:

https://github.com/kubernetes-sigs/cluster-api-provider-aws/issues/3744

https://github.com/kubernetes-sigs/cluster-api-provider-aws/issues/3974

Steps

• Reach an agreement about API design with the CAPI AWS community
  • Since this required API changes need to figure out if any enhancement document needed, prepare it if necessary
• Implement this API extension and respective controller changes for aws machines in https://github.com/kubernetes-sigs/cluster-api-provider-aws

Stakeholders

• Hypershift
• AWS CAPI community

Definition of Done

• CAPI machine API definition extended with supporting of IMDSv2
• Respective CAPI machine controller changes implemented

• Docs

• N/A for OCP, community project related

• Testing

• N/A for OCP, community project related