scope support for AWS deployments that have IMDSv1 disabled (Configure group)

Proposal

AWS is starting to recommend that their customers disable IMDSv1, for example EKS.

Customers who deploy GitLab with IMDSv1 disabled are likely to have a bad experience as some functionality will work, some functionality will not.

It is unclear which GitLab capabilities depend on IMDS for functionality in AWS, such as obtaining IAM credentials.

A non exhaustive list within groupconfigure:


This is one of a number of issues around GitLab support for deployments with only IMDSv2 enabled. For more information see the description and comments in: #334160 (closed)


Proposal

Scope which GitLab components owned by groupconfigure use IMDS but won't work with IMDSv1 disabled.

Edited by Ben Prescott (ex-GitLab)