Josh Siviour e88691e64d feat(imds): serve the cluster services domain, not amazonaws.com (#1072) ...

An AWS SDK's default endpoint resolution builds
{service}.{region}.{services/domain}. IMDS previously answered that
leaf with the literal amazonaws.com, so a workload that forgot its
endpoint override silently reached real AWS instead of failing.

Now that service-endpoint DNS resolves cluster-side, serve the
cluster's configured AWS.ServicesDomain instead, threaded from
config through vpcd.Config into NewIMDSServiceImpl. An empty value
fails closed with a 404 rather than ever falling back to
amazonaws.com. services/partition is unchanged: it still returns
aws, since AWS SDKs carry hardcoded partition tables.

2026-09-17 14:33:11 +10:00

..

iam-groups

fix: doc titles

2026-09-14 12:51:46 +10:00

iam-roles-and-instance-profiles

fix: doc titles

2026-09-14 12:51:46 +10:00

iam-users-and-policies

fix: doc titles

2026-09-14 12:51:46 +10:00

imds

feat(imds): serve the cluster services domain, not amazonaws.com (#1072)

2026-09-17 14:33:11 +10:00

sts

fix: doc titles

2026-09-14 12:51:46 +10:00