{"action":"created","issue":{"url":"https://api.github.com/repos/poise/citadel/issues/15","labels_url":"https://api.github.com/repos/poise/citadel/issues/15/labels{/name}","comments_url":"https://api.github.com/repos/poise/citadel/issues/15/comments","events_url":"https://api.github.com/repos/poise/citadel/issues/15/events","html_url":"https://github.com/poise/citadel/pull/15","id":59237608,"number":15,"title":"Support IAM credentials direct from the EC2 metadata service","user":{"login":"gavinheavyside","id":39808,"avatar_url":"https://avatars.githubusercontent.com/u/39808?v=3","gravatar_id":"","url":"https://api.github.com/users/gavinheavyside","html_url":"https://github.com/gavinheavyside","followers_url":"https://api.github.com/users/gavinheavyside/followers","following_url":"https://api.github.com/users/gavinheavyside/following{/other_user}","gists_url":"https://api.github.com/users/gavinheavyside/gists{/gist_id}","starred_url":"https://api.github.com/users/gavinheavyside/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gavinheavyside/subscriptions","organizations_url":"https://api.github.com/users/gavinheavyside/orgs","repos_url":"https://api.github.com/users/gavinheavyside/repos","events_url":"https://api.github.com/users/gavinheavyside/events{/privacy}","received_events_url":"https://api.github.com/users/gavinheavyside/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-02-27T13:44:35Z","updated_at":"2015-08-10T18:50:14Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/poise/citadel/pulls/15","html_url":"https://github.com/poise/citadel/pull/15","diff_url":"https://github.com/poise/citadel/pull/15.diff","patch_url":"https://github.com/poise/citadel/pull/15.patch"},"body":"While trying to bootstrap a new node in a private VPC subnet (unattended, using user data, not using `knife ec2` or similar), I found I was getting credential lookup failures at compile time as there was no node[:ec2] data, even after creating the hints file.\r\n\r\nRather than rely on Chef to be a credential concierge, I've added the ability to query the local metadata service directly, which is working nicely and has no reliance on run order or OHAI. This also ought to sidestep the slim chance of node data being out of date after credential rotation.\r\n\r\nI've also brought the Berksfile up to date and made the tests pass with the latest serverspec v2+"},"comment":{"url":"https://api.github.com/repos/poise/citadel/issues/comments/129563169","html_url":"https://github.com/poise/citadel/pull/15#issuecomment-129563169","issue_url":"https://api.github.com/repos/poise/citadel/issues/15","id":129563169,"user":{"login":"coderanger","id":128243,"avatar_url":"https://avatars.githubusercontent.com/u/128243?v=3","gravatar_id":"","url":"https://api.github.com/users/coderanger","html_url":"https://github.com/coderanger","followers_url":"https://api.github.com/users/coderanger/followers","following_url":"https://api.github.com/users/coderanger/following{/other_user}","gists_url":"https://api.github.com/users/coderanger/gists{/gist_id}","starred_url":"https://api.github.com/users/coderanger/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/coderanger/subscriptions","organizations_url":"https://api.github.com/users/coderanger/orgs","repos_url":"https://api.github.com/users/coderanger/repos","events_url":"https://api.github.com/users/coderanger/events{/privacy}","received_events_url":"https://api.github.com/users/coderanger/received_events","type":"User","site_admin":false},"created_at":"2015-08-10T18:50:14Z","updated_at":"2015-08-10T18:50:14Z","body":"Can you swap this to use `Chef::HTTP.get` instead of open-url? The metadata service doesn't support HTTPS unfortunately, but still good to have everything use the same HTTP client :-) Also this probably needs some checks for what happens if the node doesn't have an IAM role."}}