Josh Siviour e88691e64d feat(imds): serve the cluster services domain, not amazonaws.com (#1072) ...

An AWS SDK's default endpoint resolution builds
{service}.{region}.{services/domain}. IMDS previously answered that
leaf with the literal amazonaws.com, so a workload that forgot its
endpoint override silently reached real AWS instead of failing.

Now that service-endpoint DNS resolves cluster-side, serve the
cluster's configured AWS.ServicesDomain instead, threaded from
config through vpcd.Config into NewIMDSServiceImpl. An empty value
fails closed with a 404 rather than ever falling back to
amazonaws.com. services/partition is unchanged: it still returns
aws, since AWS SDKs carry hardcoded partition tables.

2026-09-17 14:33:11 +10:00

..

bedrock

feat: add admin Ochre catalog read and drop provider-direct model (#917)

2026-08-27 21:13:44 +10:00

cert

chore: cleanup code comments

2026-08-04 14:20:19 +10:00

ddil

chore: remove the half line breaks

2026-08-06 11:10:15 +10:00

diskperf

fix: make the EKS control plane's disk latency observable, and give it room to run (#1009)

2026-09-07 21:53:41 +10:00

ecr

test: add large multi-layer ECR push/pull e2e coverage (#1017)

2026-09-11 13:36:28 +10:00

ecs

fix: gate sts:AssumeRole on the caller's identity policy (#889)

2026-08-27 09:04:25 +10:00

eks

fix: close the four defects keeping the e2e nightly red (#1007)

2026-09-06 16:53:32 -05:00

gpu

fix: pause a guest on a backend I/O error instead of handing it EIO (#977)

2026-09-03 19:45:33 -05:00

harness

feat: publish AWS service endpoint names in DNS and match gateway cert SANs (#1068)

2026-09-17 13:46:33 +10:00

iam

feat(imds): serve the cluster services domain, not amazonaws.com (#1072)

2026-09-17 14:33:11 +10:00

lb

fix: serialise DNS zone writes behind a per-zone lock (#610)

2026-07-30 18:47:07 +10:00

manifest-check

chore: cleanup code comments

2026-08-04 14:20:19 +10:00

manifest-lint

chore: update manifest lint

2026-08-17 11:13:07 +10:00

multinode

fix: retry a recovery relaunch that lost a race with a starting dependency (#1020)

2026-09-14 10:39:06 -05:00

natuplink

fix: close the four defects keeping the e2e nightly red (#1007)

2026-09-06 16:53:32 -05:00

partialblock

fix: pause a guest on a backend I/O error instead of handing it EIO (#977)

2026-09-03 19:45:33 -05:00

quota

fix: fail daemon start when a node with public pools cannot build external IPAM

2026-08-20 03:48:45 +10:00

rds

feat: publish AWS service endpoint names in DNS and match gateway cert SANs (#1068)

2026-09-17 13:46:33 +10:00

reboot

fix: reboot a guest by asking it, not by pulling its reset line (#1028)

2026-09-14 15:39:27 -05:00

select-suites

refactor: use strings.CutPrefix/CutSuffix for guard-then-trim pairs

2026-09-16 16:18:33 +10:00

single

refactor: use strings.CutPrefix/CutSuffix for guard-then-trim pairs

2026-09-16 16:18:33 +10:00

storagefault

fix: pause a guest on a backend I/O error instead of handing it EIO (#977)

2026-09-03 19:45:33 -05:00

storagegrowth

fix: pause a guest on a backend I/O error instead of handing it EIO (#977)

2026-09-03 19:45:33 -05:00

teardown

feat(eks): multinode control-plane + IMDS/token-webhook CP fixes (426/427/428/495/496) (#459)

2026-07-09 09:43:30 +10:00

.failure-rules.yaml

feat(e2e): Go E2E harness + single-node migration to Ensure*/Discover* + reboot suite (#241)

2026-05-20 21:04:13 +10:00

Makefile

fix: pause a guest on a backend I/O error instead of handing it EIO (#977)

2026-09-03 19:45:33 -05:00

run-bm-multinode-e2e.sh

fix(e2e): kill the node-failure phase abruptly instead of draining it (#785)

2026-08-13 12:30:15 +10:00

run-tofu-examples-e2e.sh

fix: wait for postgres to be up before running tofu workbook e2e

2026-08-05 11:48:58 +10:00