credential_provider

Documentation

Index

• Constants
• type CredentialProvider
  • func NewIRSACredentialProvider(stsClient stsiface.STSAPI, region, nameSpace, svcAcc string, ...) CredentialProvider
  • func NewPodIdentityCredentialProvider(region, nameSpace, svcAcc, podName, preferredAddressType string, ...) (CredentialProvider, error)
• type IRSACredentialProvider
  • func (p *IRSACredentialProvider) GetAWSConfig() (*aws.Config, error)
• type PodIdentityCredentialProvider
  • func (p *PodIdentityCredentialProvider) GetAWSConfig() (*aws.Config, error)

Constants

const (
	ProviderName = "secrets-store-csi-driver-provider-aws"
)

Types

type CredentialProvider

type CredentialProvider interface {
	// GetAWSConfig returns an AWS configuration containing credentials obtained from the provider
	GetAWSConfig() (*aws.Config, error)
}

CredentialProvider interface defines methods for obtaining AWS credentials configuration

func NewIRSACredentialProvider

func NewIRSACredentialProvider(
	stsClient stsiface.STSAPI,
	region, nameSpace, svcAcc string,
	k8sClient k8sv1.CoreV1Interface,
	ctx context.Context,
) CredentialProvider

func NewPodIdentityCredentialProvider

func NewPodIdentityCredentialProvider(
	region, nameSpace, svcAcc, podName, preferredAddressType string,
	k8sClient k8sv1.CoreV1Interface,
) (CredentialProvider, error)

type IRSACredentialProvider

type IRSACredentialProvider struct {
	// contains filtered or unexported fields
}

IRSACredentialProvider implements CredentialProvider using IAM Roles for Service Accounts

func (*IRSACredentialProvider) GetAWSConfig

func (p *IRSACredentialProvider) GetAWSConfig() (*aws.Config, error)

type PodIdentityCredentialProvider

type PodIdentityCredentialProvider struct {
	// contains filtered or unexported fields
}

PodIdentityCredentialProvider implements CredentialProvider using pod identity

func (*PodIdentityCredentialProvider) GetAWSConfig

func (p *PodIdentityCredentialProvider) GetAWSConfig() (*aws.Config, error)