Support IMDSv2 in the AWS auth instance profile scripts

ExportXMLWordPrintableJSON

    • Type: Improvement
    • Resolution: Duplicate
    • Priority: Blocker - P1
    • None
    • Component/s: Evergreen Tools
    • None
    • Needed - No Spec Changes

      Summary

      The Go driver's CI for AWS tests are broken since 9.0 enterprise doesn't support 20.04 and RHEL 8.7 isn't sufficient (ECS tests only appear to be supported for Ubuntu) for the AWS tests. When using 24.04 we get

      INFO     Running aws_tester.py with ec2...
INFO     Reading: http://169.254.169.254/latest/meta-data/iam/security-credentials/
ERROR    HTTP Error 401: Unauthorized
Traceback (most recent call last):
  ...aws_tester.py, line 108, in setup_ec2
    _assign_instance_policy()
  ...lib/aws_assign_instance_profile.py, line 96, in _assign_instance_policy
    if _has_instance_profile():
  ...lib/aws_assign_instance_profile.py, line 42, in _has_instance_profile
  ...
  File "/usr/lib/python3.12/urllib/request.py", line 639, in http_error_default
urllib.error.HTTPError: HTTP Error 401: Unauthorized

      On hosts that require IMDSv2, such as the Evergreen ubuntu2404 distros, these reads fail with HTTP 401, so the MONGODB-AWS EC2 test setup fails.

      Acceptance Criteria

      auth_aws/lib/aws_assign_instance_profile.py and aws_unassign_instance_profile.py needs to support IMDSv2.

            Assignee:
            Unassigned
            Reporter:
            Preston Vasquez
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: