Documentation
¶
Overview ¶
Package azureauth provides Azure Workload Identity Federation for simrun. When an Azure connector is configured with WIF, simrun sets environment variables that allow the Azure SDK and Terraform azurerm provider to exchange a Kubernetes service account token for Azure credentials.
Index ¶
Constants ¶
View Source
const DefaultTokenFile = "/var/run/secrets/eks.amazonaws.com/serviceaccount/token"
DefaultTokenFile is the standard OIDC token path on EKS. Azure WIF uses the Kubernetes service account token projected by IRSA for federation.
Variables ¶
This section is empty.
Functions ¶
func CredentialEnvVars ¶
CredentialEnvVars returns the environment variables needed for both the Terraform azurerm provider and the Azure SDK to use workload identity federation.
Types ¶
type WIFConfig ¶
type WIFConfig struct {
TenantID string `json:"tenant_id"`
ClientID string `json:"client_id"`
SubscriptionID string `json:"subscription_id"`
TokenFile string `json:"token_file"` // defaults to DefaultTokenFile
}
WIFConfig holds the Azure Workload Identity Federation configuration.
func (WIFConfig) EffectiveTokenFile ¶
EffectiveTokenFile returns the token file path, falling back to the default.
Source Files
Click to show internal directories.
Click to hide internal directories.