Repository navigation
ec2-metadata: bypass proxy for IMDS requests - #57
Open
reginaldalfret wants to merge 1 commit into
Open
reginaldalfret wants to merge 1 commit into
reginaldalfret wants to merge 1 commit into
Conversation
When http_proxy or HTTP_PROXY is configured in the environment, curl attempts to route instance metadata requests through the proxy server. Add --noproxy '*' to curl invocations in ec2-metadata so that local metadata requests are always sent directly to IMDS. Fixes amazonlinux#52 Signed-off-by: reginaldalfret <reginaldalfret@gmail.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
When
http_proxyorHTTP_PROXYis defined in the environment,ec2-metadataroutes requests through the proxy server, failing or returning incorrect metadata from the proxy host rather than the local EC2 instance.This PR adds
--noproxy '*'to thecurlcalls inset_imds_tokenandget_meta, ensuring that IMDS requests always connect directly to the instance metadata service regardless of proxy configuration.Fixes #52
Signed-off-by: reginaldalfret reginaldalfret@gmail.com