Skip to content

Commit 2c77d49

Browse files
authored
doc: Update configuration notes for working with IMDSv2 metadata server (#2243)
* SGA-999 update IMDSv2 notes * SGA-9999
1 parent 1167abe commit 2c77d49

File tree

1 file changed

+10
-0
lines changed

1 file changed

+10
-0
lines changed

docs/deploy/installation.md

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -18,6 +18,16 @@
1818
- Ensure subnets are tagged appropriately for auto-discovery to work
1919
- For IP targets, pods must have IPs from the VPC subnets. You can configure `amazon-vpc-cni-k8s` plugin for this purpose.
2020

21+
## Using metadata server version 2 (IMDSv2)
22+
If you are using the IMDSv2 you must set the hop limit to 2 or higher in order to allow the AWS Load Balancer Controller to perform the metadata introspection. Otherwise you have to manually specify the AWS region and the VPC via the controller flags `--aws-region` and `--aws-vpc-id`.
23+
24+
25+
!!!tip
26+
You can set the IMDSv2 hop limit as follows:
27+
```
28+
aws ec2 modify-instance-metadata-options --http-put-response-hop-limit 2 --region <region> --instance-id <instance-id>
29+
```
30+
2131
## IAM Permissions
2232

2333
#### Setup IAM role for service accounts

0 commit comments

Comments
 (0)