awsauthn

type Config ¶

type Config struct {
	// Aws is a standard config object containing valid AWS credentials of any
	// kind, e.g. access keys or SSO tokens.
	Aws aws.Config
}

type Keychain ¶

type Keychain struct {
	// contains filtered or unexported fields
}

Keychain is a container registry authenticator using the standard AWS credentials without requiring the host file system. Most keychain implementations work with the host's local .docker/config.json, which is not useful if we already have a set of standard AWS credentials setup for our program. This keychain implementation works by requesting an authoriczation token from ECR for the container registry identified by the provided AWS credentials, which usually resolves to the AWS account within which those AWS credentials have been defined.

func New(c Config) *Keychain

func (k *Keychain) Resolve(r authn.Resource) (authn.Authenticator, error)