Documentation
¶
Index ¶
Constants ¶
View Source
const ( RamRoleARNAuthType = "ram_role_arn" AKAuthType = "access_key" EcsRamRoleAuthType = "ecs_ram_role" OidcAuthType = "oidc_role_arn" )
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type AuthConfig ¶
type AuthConfig struct {
ClientName string
RoleArn string
OidcArn string
AccessKey string
AccessSecretKey string
RoleSessionName string
RoleSessionExpiration string
RemoteRoleArn string
RemoteRoleSessionName string
RefreshPeriod time.Duration
TokenFilePath string
ServiceAccountName string
ServiceAccountNamespace string
KubeClient kubernetes.Interface
TokenAudiences []string
}
func (*AuthConfig) GetAuthCred ¶
func (a *AuthConfig) GetAuthCred(region string, maxConcurrentCount int, m *backendp.Manager) (credential.Credential, error)
type TokenOIDCProvider ¶
type TokenOIDCProvider struct {
// contains filtered or unexported fields
}
TokenOIDCProvider implements OIDC provider based on dynamic token
func NewTokenOIDCProvider ¶
func NewTokenOIDCProvider(stsEndpoint, sessionName, token, roleArn, oidcProviderArn string, refreshPeriod time.Duration) *TokenOIDCProvider
NewTokenOIDCProvider creates a new OIDC provider based on token
func (*TokenOIDCProvider) Credentials ¶
func (p *TokenOIDCProvider) Credentials(context.Context) (*provider.Credentials, error)
Credentials implements the provider.CredentialsProvider interface
func (*TokenOIDCProvider) GetCredential ¶
func (p *TokenOIDCProvider) GetCredential() (credential.Credential, error)
GetCredential gets credential from STS service using OIDC token
Source Files
Click to show internal directories.
Click to hide internal directories.