e2etest/GuestProxyAgentTest/Scripts/IMDSPingTest.ps1

# Copyright (c) Microsoft Corporation
# SPDX-License-Identifier: MIT

param (
    [Parameter(Mandatory = $true, Position = 0)]
    [string]$imdsSecureChannelEnabled
)
Write-Output "$((Get-Date).ToUniversalTime()) - imdsSecureChannelEnabled=$imdsSecureChannelEnabled"

$i = 0
# make 10 requests if any failed, will failed the test for tcp port scalability config
while ($i -lt 10) {
    try {
        $url = "http://169.254.169.254/metadata/instance?api-version=2020-06-01"
        $webRequest = [System.Net.HttpWebRequest]::Create($url)	
        $webRequest.Headers.Add("Metadata", "True")
        $response = $webRequest.GetResponse()
        if ($response.StatusCode -eq [System.Net.HttpStatusCode]::OK) {
            Write-Output "$((Get-Date).ToUniversalTime()) - Response status code is OK (200)"
        }
        else {
            Write-Error "$((Get-Date).ToUniversalTime()) - Ping test failed. Response status code is $($response.StatusCode)"
            exit -1
        }

        if ("$imdsSecureChannelEnabled" -ieq "true") { # case insensitive comparison
            $responseHeaders = $response.Headers
            if ($null -eq $responseHeaders["x-ms-azure-host-authorization"]) {
                Write-Error "$((Get-Date).ToUniversalTime()) - Ping test failed. Response does not contain x-ms-azure-host-authorization header"
                exit -1
            }
            else {
                Write-Output "$((Get-Date).ToUniversalTime()) - Ping test passed. Response contains x-ms-azure-host-authorization header"
            }
		
        }
        else {
            Write-Output "$((Get-Date).ToUniversalTime()) - IMDS secure channel is not enabled. Skipping x-ms-azure-host-authorization header validation"
        }

        $webRequest.Abort()
    }
    catch {
        Write-Error "$((Get-Date).ToUniversalTime()) - An error occurred: $_"
        exit -1
    }
    start-sleep -Seconds 1
    $i++
}
exit 0