Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support login_as_non_root flag for alicloud_instance resource #7687

Open
aleksf-awx opened this issue Sep 19, 2024 · 0 comments
Open

Support login_as_non_root flag for alicloud_instance resource #7687

aleksf-awx opened this issue Sep 19, 2024 · 0 comments

Comments

@aleksf-awx
Copy link

It does no appear login_as_non_root is currently implemented for alicloud_instance resource. It is however supported by the API by virtue of boolean flag LoginAsNonRoot https://github.com/aliyun/terraform-provider-alicloud/blob/master/vendor/github.com/aliyun/alibaba-cloud-sdk-go/services/ecs/run_instances.go#L177. This flag controls whether to create unprivileged ecs-user during instance creation for instances that use images that support it, further documented in - https://www.alibabacloud.com/help/en/ecs/user-guide/manage-the-username-used-to-log-on-to-an-ecs-instance#62206fc07eull and https://www.alibabacloud.com/help/en/ecs/developer-reference/api-ecs-2014-05-26-runinstances

It is also currently implemented for https://registry.terraform.io/providers/aliyun/alicloud/latest/docs/resources/cs_kubernetes_node_pool#login_as_non_root which essentially calls the same RunInstances API with LoginAsNonRoot boolean.

Please implement it for alicloud_instance resource as it is very useful security feature.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant