upgrade metadata call to use IMDSv2, only supported version soon

Author: wdvr

.github/workflows/run_tests.yaml

@@ -1,7 +1,7 @@
 on:
   pull_request:
   push:
-    branches: [ main ]
+    branches: [main]
   workflow_call:
 
 jobs:
@@ -63,7 +63,7 @@ jobs:
             # Pulled from instance metadata endpoint for EC2
             # see https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instancedata-data-retrieval.html
             category=$1
-            curl -fsSL "http://169.254.169.254/latest/meta-data/${category}"
+            curl -H "X-aws-ec2-metadata-token: $(curl -s -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-seconds: 30")" -fsSL "http://169.254.169.254/latest/meta-data/${category}"
           }
           echo "ami-id: $(get_ec2_metadata ami-id)"
           echo "instance-id: $(get_ec2_metadata instance-id)"
@@ -92,51 +92,51 @@ jobs:
       - name: Upload coverage to codecov
         uses: codecov/codecov-action@v2
 
-# Disabled to unblock TNT OSS release.
-#
-#  s3_integration_test:
-#    if: github.event.pull_request.head.repo.fork == false
-#    runs-on: ubuntu-latest
-#    strategy:
-#      matrix:
-#        python-version: [3.8]
-#    # These permissions are needed to interact with GitHub's OIDC Token endpoint
-#    permissions:
-#      id-token: write
-#      contents: read
-#    steps:
-#      - name: Configure AWS Credentials
-#        uses: aws-actions/configure-aws-credentials@v1
-#        with:
-#          role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
-#          aws-region: us-east-1
-#      - name: Set environment variables
-#        run: echo "TORCHSNAPSHOT_ENABLE_AWS_TEST=1" >> $GITHUB_ENV
-#      - name: Check out repo
-#        uses: actions/checkout@v2
-#      - name: Setup conda env
-#        uses: conda-incubator/setup-miniconda@v2
-#        with:
-#          miniconda-version: "latest"
-#          activate-environment: test
-#          python-version: ${{ matrix.python-version }}
-#      - name: Install dependencies
-#        shell: bash -l {0}
-#        run: |
-#          set -eux
-#          conda activate test
-#          conda install pytorch cpuonly -c pytorch-nightly
-#          pip install -r requirements.txt
-#          pip install -r dev-requirements.txt
-#          pip install --no-build-isolation -e ".[dev]"
-#      - name: Run unit tests with coverage
-#        shell: bash -l {0}
-#        run: |
-#          set -eux
-#          conda activate test
-#          pytest --timeout=300 --cov=. --cov-report xml -vv -rA -m s3_integration_test tests
-#      - name: Upload coverage to codecov
-#        uses: codecov/codecov-action@v2
+  # Disabled to unblock TNT OSS release.
+  #
+  #  s3_integration_test:
+  #    if: github.event.pull_request.head.repo.fork == false
+  #    runs-on: ubuntu-latest
+  #    strategy:
+  #      matrix:
+  #        python-version: [3.8]
+  #    # These permissions are needed to interact with GitHub's OIDC Token endpoint
+  #    permissions:
+  #      id-token: write
+  #      contents: read
+  #    steps:
+  #      - name: Configure AWS Credentials
+  #        uses: aws-actions/configure-aws-credentials@v1
+  #        with:
+  #          role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
+  #          aws-region: us-east-1
+  #      - name: Set environment variables
+  #        run: echo "TORCHSNAPSHOT_ENABLE_AWS_TEST=1" >> $GITHUB_ENV
+  #      - name: Check out repo
+  #        uses: actions/checkout@v2
+  #      - name: Setup conda env
+  #        uses: conda-incubator/setup-miniconda@v2
+  #        with:
+  #          miniconda-version: "latest"
+  #          activate-environment: test
+  #          python-version: ${{ matrix.python-version }}
+  #      - name: Install dependencies
+  #        shell: bash -l {0}
+  #        run: |
+  #          set -eux
+  #          conda activate test
+  #          conda install pytorch cpuonly -c pytorch-nightly
+  #          pip install -r requirements.txt
+  #          pip install -r dev-requirements.txt
+  #          pip install --no-build-isolation -e ".[dev]"
+  #      - name: Run unit tests with coverage
+  #        shell: bash -l {0}
+  #        run: |
+  #          set -eux
+  #          conda activate test
+  #          pytest --timeout=300 --cov=. --cov-report xml -vv -rA -m s3_integration_test tests
+  #      - name: Upload coverage to codecov
+  #        uses: codecov/codecov-action@v2
 
   gcs_integration_tests:
     if: github.event.pull_request.head.repo.fork == false