Skip to content

Commit 22fb986

Browse files
authored
Disable IMDSv1 (#363)
1 parent 9cfcfdb commit 22fb986

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

infrastructure/lib/kit-infrastructure.ts

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -112,6 +112,9 @@ export class KITInfrastructure extends Stack {
112112
});
113113

114114
// Setup Tekton test permissions
115+
const lt = new ec2.LaunchTemplate(this, 'tekton-tests-lt', {
116+
requireImdsv2: true
117+
})
115118

116119
const ns = cluster.addManifest('tekton-tests-ns', {
117120
apiVersion: 'v1',
@@ -126,6 +129,7 @@ export class KITInfrastructure extends Stack {
126129
namespace: testNS
127130
})
128131
sa.node.addDependency(ns)
132+
sa.node.addDependency(lt)
129133
sa.role.attachInlinePolicy(new iam.Policy(this, 'tekton-tests-policy', {
130134
statements: [
131135
new iam.PolicyStatement({

0 commit comments

Comments
 (0)