integration-test: enforce IMDSv2 calls when launching instances

bottlerocket-os · Jan 30, 2023 · 19c778d · 19c778d
1 parent 64704db
commit 19c778d
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/integ/src/nodegroup_provider.rs b/integ/src/nodegroup_provider.rs
@@ -15,7 +15,8 @@ use aws_sdk_eks::model::IpFamily;
 use aws_config::meta::region::RegionProviderChain;
 use aws_sdk_ec2::error::DescribeLaunchTemplatesError;
 use aws_sdk_ec2::model::{
-    ArchitectureValues, InstanceType, LaunchTemplateTagSpecificationRequest,
+    ArchitectureValues, InstanceType, LaunchTemplateHttpTokensState,
+    LaunchTemplateInstanceMetadataOptionsRequest, LaunchTemplateTagSpecificationRequest,
     RequestLaunchTemplateData, ResourceType, Tag,
 };
 
@@ -205,6 +206,11 @@ async fn create_launch_template(
                         cluster.dns_ip_info.clone(),
                     )?)
                     .tag_specifications(tag_specifications(&cluster.name))
+                    .metadata_options(
+                        LaunchTemplateInstanceMetadataOptionsRequest::builder()
+                            .http_tokens(LaunchTemplateHttpTokensState::Required)
+                            .build(),
+                    )
                     .build(),
             )
             .send()