Update integration tests and userdocs references to IMDSv1 (#6618)

* Make IMDSv2 the default * update integration tests and userdocs references
eksctl-io · May 18, 2023 · 5e7b8eb · 5e7b8eb
1 parent 8a36bf3
commit 5e7b8eb
Show file tree

Hide file tree

Showing 4 changed files with 7 additions and 6 deletions.
diff --git a/examples/05-advanced-nodegroups.yaml b/examples/05-advanced-nodegroups.yaml
@@ -16,8 +16,8 @@ nodeGroups:
     volumeType: gp2
     ami: ami-05ecac759c81e0b0c
     amiFamily: AmazonLinux2
-    # forces the use of IMDSv2 tokens
-    disableIMDSv1: true
+    # defaults to true, which enforces the use of IMDSv2 tokens
+    disableIMDSv1: false
     labels:
       nodegroup-type: frontend-workloads
     iam:

diff --git a/integration/tests/dry_run/dry_run_test.go b/integration/tests/dry_run/dry_run_test.go
@@ -68,7 +68,7 @@ kubernetesNetworkConfig:
 nodeGroups:
 - amiFamily: AmazonLinux2
   containerRuntime: containerd
-  disableIMDSv1: false
+  disableIMDSv1: true
   disablePodIMDS: false
   instanceSelector: {}
   iam:
@@ -104,7 +104,7 @@ nodeGroups:
 managedNodeGroups:
 - amiFamily: AmazonLinux2
   desiredCapacity: 2
-  disableIMDSv1: false
+  disableIMDSv1: true
   disablePodIMDS: false
   instanceSelector: {}
   iam:

diff --git a/userdocs/src/usage/dry-run.md b/userdocs/src/usage/dry-run.md
@@ -21,7 +21,7 @@ kind: ClusterConfig
 managedNodeGroups:
 - amiFamily: AmazonLinux2
   desiredCapacity: 2
-  disableIMDSv1: false
+  disableIMDSv1: true
   disablePodIMDS: false
   iam:
     withAddonPolicies:

diff --git a/userdocs/src/usage/eks-managed-nodes.md b/userdocs/src/usage/eks-managed-nodes.md
@@ -136,7 +136,8 @@ managedNodeGroups:
     volumeSize: 100
     volumeName: /dev/xvda
     volumeEncrypted: true
-    disableIMDSv1: true
+    # defaults to true, which enforces the use of IMDSv2 tokens
+    disableIMDSv1: false  
     overrideBootstrapCommand: |
       #!/bin/bash
       /etc/eks/bootstrap.sh managed-cluster --kubelet-extra-args '--node-labels=eks.amazonaws.com/nodegroup=custom-ng,eks.amazonaws.com/nodegroup-image=ami-0e124de4755b2734d'