Skip to content

Add option for disable legacy imds endpoints - security issue #69

@VAdamec

Description

@VAdamec

Description

Possibility / new default for any instance in OCI - imdsv2 only

Use Case(s)

As IMDSv1 is unsecure we need to enforce v2 only

Potential configuration

    instance_options {
      are_legacy_imds_endpoints_disabled = "true
    }

GO SDK - core/instance_configuration_instance_options.go

...
AreLegacyImdsEndpointsDisabled *bool `mandatory:"false" json:"areLegacyImdsEndpointsDisabled"`
...

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions