Documentation
¶
Index ¶
- func BuildAuthRequest(stsRequest, tagsRequest *awstypes.PresignedRequest) *models.ServiceRunnerAuthAWSRequest
- func BuildIIDAuthRequest(iid *IIDResult, runnerID string) *models.ServiceRunnerAuthAWSIIDRequest
- func GetPresignedInstanceTagsRequest(ctx context.Context) (*awstypes.PresignedRequest, error)
- func GetPresignedSTSRequest(ctx context.Context) (*awstypes.PresignedRequest, error)
- type IIDResult
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func BuildAuthRequest ¶
func BuildAuthRequest(stsRequest, tagsRequest *awstypes.PresignedRequest) *models.ServiceRunnerAuthAWSRequest
BuildAuthRequest creates a RunnerAuthAWSRequest from presigned STS and EC2 tags requests.
func BuildIIDAuthRequest ¶ added in v0.19.894
func BuildIIDAuthRequest(iid *IIDResult, runnerID string) *models.ServiceRunnerAuthAWSIIDRequest
BuildIIDAuthRequest creates a RunnerAuthAWSIIDRequest from an IID result and a runner ID.
func GetPresignedInstanceTagsRequest ¶
func GetPresignedInstanceTagsRequest(ctx context.Context) (*awstypes.PresignedRequest, error)
GetPresignedInstanceTagsRequest creates a presigned EC2 DescribeTags request for the current instance. This allows another service to fetch instance tags to verify the runner's identity.
func GetPresignedSTSRequest ¶
func GetPresignedSTSRequest(ctx context.Context) (*awstypes.PresignedRequest, error)
GetPresignedSTSRequest creates a presigned STS GetCallerIdentity request. The presigned request can be sent to another service which will make the actual STS call to validate the caller's identity.
Types ¶
Click to show internal directories.
Click to hide internal directories.