10 Commits

Author	SHA1	Message	Date
Josh Siviour	b9898a7e88	feat(imds): allow HttpTokens=optional per instance (#664) ... Spinifex rejected HttpTokens=optional and served 401 to every untokened GET, which is stricter than AWS, whose own default is optional. That made Windows guests impossible: cloudbase-init is the only realistic Windows bootstrap agent and its EC2Service has no IMDSv2 token support in any released version, so a Windows instance never received its hostname, injected password or user-data. HttpTokens is now settable at launch and via ModifyInstanceMetadataOptions, accepting optional or required. The launch default stays required, so an instance that does not ask for IMDSv1 never gets it. Every other metadata-option field keeps its existing rejection. The untokened path is reachable without credentials, so the per-instance lookup is cached with a short TTL; without that a guest could drive unbounded DescribeInstances fan-outs. A valid token short-circuits before the lookup, so compliant IMDSv2 clients are unaffected.	2026-08-03 08:56:04 +10:00
Julian Sommer	81081fb409	chore: make prerequisites consistent across docs	2026-07-09 09:43:31 +10:00
Julian Sommer	ee2ab8e952	chore: cleanup docs	2026-07-09 09:43:31 +10:00
Julian Sommer	37340e8b74	feat: sts doc	2026-07-09 09:43:31 +10:00
Julian Sommer	685686e688	feat: iam groups doc	2026-07-09 09:43:31 +10:00
Julian Sommer	97418c03dc	feat: iam roles doc	2026-07-09 09:43:31 +10:00
Julian Sommer	0c63ef3bbf	fix: aws configure for iam user	2026-07-09 09:43:31 +10:00
Julian Sommer	64a93e6cc1	chore: merge creating accounts doc	2026-07-09 09:43:31 +10:00
Julian Sommer	bbb578f0a7	feat: update iam docs	2026-07-09 09:43:31 +10:00
Julian Sommer	0d1b28cec2	feat: IMDS doc	2026-07-09 09:43:31 +10:00