const (
// AzureProviderName provides a name of Azure provider
AzureProviderName = "AzureProvider"
)
An AssumeRoleProvider retrieves credentials for assume role with web identity.
type AssumeRoleProvider struct {
AwsRoleArnEnv EnvVar
AwsWebIdentityTokenFileEnv EnvVar
AwsRoleSessionNameEnv EnvVar
// contains filtered or unexported fields
}
func NewAssumeRoleProvider(httpClient *http.Client, expiryWindow time.Duration) *AssumeRoleProvider
NewAssumeRoleProvider returns a pointer to an assume role provider.
func (a *AssumeRoleProvider) IsExpired() bool
IsExpired returns true if the credentials are expired.
func (a *AssumeRoleProvider) Retrieve() (credentials.Value, error)
Retrieve retrieves the keys from the AWS service.
func (a *AssumeRoleProvider) RetrieveWithContext(ctx context.Context) (credentials.Value, error)
RetrieveWithContext retrieves the keys from the AWS service.
An AzureProvider retrieves credentials from Azure IMDS.
type AzureProvider struct {
// contains filtered or unexported fields
}
func NewAzureProvider(httpClient *http.Client, expiryWindow time.Duration) *AzureProvider
NewAzureProvider returns a pointer to an Azure credential provider.
func (a *AzureProvider) IsExpired() bool
IsExpired returns if the credentials have been retrieved.
func (a *AzureProvider) Retrieve() (credentials.Value, error)
Retrieve retrieves the keys from the Azure service.
func (a *AzureProvider) RetrieveWithContext(ctx context.Context) (credentials.Value, error)
RetrieveWithContext retrieves the keys from the Azure service.
An EC2Provider retrieves credentials from EC2 metadata.
type EC2Provider struct {
// contains filtered or unexported fields
}
func NewEC2Provider(httpClient *http.Client, expiryWindow time.Duration) *EC2Provider
NewEC2Provider returns a pointer to an EC2 credential provider.
func (e *EC2Provider) IsExpired() bool
IsExpired returns true if the credentials are expired.
func (e *EC2Provider) Retrieve() (credentials.Value, error)
Retrieve retrieves the keys from the AWS service.
func (e *EC2Provider) RetrieveWithContext(ctx context.Context) (credentials.Value, error)
RetrieveWithContext retrieves the keys from the AWS service.
An ECSProvider retrieves credentials from ECS metadata.
type ECSProvider struct {
AwsContainerCredentialsRelativeURIEnv EnvVar
// contains filtered or unexported fields
}
func NewECSProvider(httpClient *http.Client, expiryWindow time.Duration) *ECSProvider
NewECSProvider returns a pointer to an ECS credential provider.
func (e *ECSProvider) IsExpired() bool
IsExpired returns true if the credentials are expired.
func (e *ECSProvider) Retrieve() (credentials.Value, error)
Retrieve retrieves the keys from the AWS service.
func (e *ECSProvider) RetrieveWithContext(ctx context.Context) (credentials.Value, error)
RetrieveWithContext retrieves the keys from the AWS service.
A EnvProvider retrieves credentials from the environment variables of the running process. Environment credentials never expire.
type EnvProvider struct {
AwsAccessKeyIDEnv EnvVar
AwsSecretAccessKeyEnv EnvVar
AwsSessionTokenEnv EnvVar
// contains filtered or unexported fields
}
func NewEnvProvider() *EnvProvider
NewEnvProvider returns a pointer to an ECS credential provider.
func (e *EnvProvider) IsExpired() bool
IsExpired returns true if the credentials have not been retrieved.
func (e *EnvProvider) Retrieve() (credentials.Value, error)
Retrieve retrieves the keys from the environment.
EnvVar is an environment variable
type EnvVar string
func (ev EnvVar) Get() string
Get retrieves the environment variable
A StaticProvider is a set of credentials which are set programmatically, and will never expire.
type StaticProvider struct {
credentials.Value
// contains filtered or unexported fields
}
func (s *StaticProvider) IsExpired() bool
IsExpired returns if the credentials are expired.
For StaticProvider, the credentials never expired.
func (s *StaticProvider) Retrieve() (credentials.Value, error)
Retrieve returns the credentials or error if the credentials are invalid.