169.254.169.254
on port 80
. IMDS is only accessible
from within a running container instance on SaladCloud, and the requests never leave the SaladCloud Node. HTTP clients
in your container instances must bypass any web proxies when calling IMDS.
Access IMDS
To access IMDS, create a Container Group through the SaladCloud API or the SaladCloud Portal, open a terminal to a running container instance through the SaladCloud Portal, and use the following sample. The/v1/status
endpoint can be used to get the health statuses of the running container instance. Call the endpoint
from the terminal using curl
:
You can learn more about this command and its arguments on the awesome https://explainshell.com website.
IMDS SDKs
We provide SDKs to facilitate IMDS integrations from your applications. We strongly encourage the use of the IMDS SDKs over custom HTTP client integrations whenever possible. Refer to the package READMEs for more details on installation and configuration. The following samples demonstrate using the SDKs to get the health statuses of the running container instance.Security and Authentication
IMDS is only accessible from within a running container instance on SaladCloud, and the requests never leave the Salad Node. IMDS requests sent to web proxies will fail, and you should explicitly configure your HTTP client to disable any web proxies (manually configured or automatically discovered). To prevent unintended or unwanted redirection of requests, requests to IMDS must contain the custom headerMetadata: true
and must not contain any X-Forwarded-For
, X-Forwarded-Host
, or X-Forwarded-Proto
headers. Any
requests missing the custom header Metadata: true
or containing the X-Forwarded-For
, X-Forwarded-Host
, or
X-Forwarded-Proto
headers are rejected with a 403 Forbidden
response.