aws

Nov 15, 2024

Changes in this version

+ const WorkerEC2RegistryKey

+ func GetHcpAccountRolePolicyKeys(roleType string) []string

type Client

+ ListPolicyVersions func(policyArn string) ([]PolicyVersion, error)

type MockClient

+ func (m *MockClient) ListPolicyVersions(policyArn string) ([]PolicyVersion, error)

type MockClientMockRecorder

+ func (mr *MockClientMockRecorder) ListPolicyVersions(policyArn any) *gomock.Call

+ type PolicyVersion struct

+ IsDefaultVersion bool

+ VersionID string

May 30, 2024

Changes in this version

+ const TrueString

type Client

+ GetAccountRoleDefaultPolicy func(roleName string, prefix string) (string, error)

+ GetOperatorRoleDefaultPolicy func(roleName string) (string, error)

+ GetOperatorRolePolicies func(roles []string) (map[string][]string, map[string][]string, error)

+ ListAttachedRolePolicies func(roleName string) ([]string, error)

type MockClient

+ func (m *MockClient) GetAccountRoleDefaultPolicy(roleName, prefix string) (string, error)

+ func (m *MockClient) GetOperatorRoleDefaultPolicy(roleName string) (string, error)

+ func (m *MockClient) GetOperatorRolePolicies(roles []string) (map[string][]string, map[string][]string, error)

+ func (m *MockClient) ListAttachedRolePolicies(roleName string) ([]string, error)

type MockClientMockRecorder

+ func (mr *MockClientMockRecorder) GetAccountRoleDefaultPolicy(roleName, prefix any) *gomock.Call

+ func (mr *MockClientMockRecorder) GetOperatorRoleDefaultPolicy(roleName any) *gomock.Call

+ func (mr *MockClientMockRecorder) GetOperatorRolePolicies(roles any) *gomock.Call

+ func (mr *MockClientMockRecorder) ListAttachedRolePolicies(roleName any) *gomock.Call

May 14, 2024

Changes in this version

+ const IAMServiceCode

+ const IAMServiceRegion

+ var PolicyArnRE = regexp.MustCompile(`^arn:aws[\w-]*:iam::(\d{12}|aws):policy(?:\/+[\w+=,.@-]+)+$`)

type Client

+ DetachRolePolicy func(policyArn string, roleName string) error

+ GetIAMServiceQuota func(quotaCode string) (*servicequotas.GetServiceQuotaOutput, error)

+ GetRoleByName func(roleName string) (iamtypes.Role, error)

type MockClient

+ func (m *MockClient) DetachRolePolicy(policyArn, roleName string) error

+ func (m *MockClient) GetIAMServiceQuota(quotaCode string) (*servicequotas.GetServiceQuotaOutput, error)

+ func (m *MockClient) GetRoleByName(roleName string) (types0.Role, error)

type MockClientMockRecorder

+ func (mr *MockClientMockRecorder) DetachRolePolicy(policyArn, roleName any) *gomock.Call

+ func (mr *MockClientMockRecorder) GetIAMServiceQuota(quotaCode any) *gomock.Call

+ func (mr *MockClientMockRecorder) GetRoleByName(roleName any) *gomock.Call

Apr 2, 2024

Changes in this version

+ const LocalZone

+ const WavelengthZone

+ func Ec2ResourceHasTag(tags []ec2types.Tag, tagName, tagValue string) bool

type Client

+ GetAvailabilityZoneType func(availabilityZoneName string) (string, error)

type ClientBuilder

+ func (b *ClientBuilder) BuildSession() (aws.Config, error)

type Creator

+ Partition string

type MockClient

+ func (m *MockClient) GetAvailabilityZoneType(availabilityZoneName string) (string, error)

type MockClientMockRecorder

+ func (mr *MockClientMockRecorder) GetAvailabilityZoneType(availabilityZoneName any) *gomock.Call

Feb 29, 2024

Changes in this version

+ func MockOidcConfig(id string, issuerUrl string) (*cmv1.OidcConfig, error)

+ type AccessKeyGetter interface

+ GetAWSAccessKeys func() (*AccessKey, error)

+ GetLocalAWSAccessKeys func() (*AccessKey, error)

type Creator

+ func CreatorForCallerIdentity(identity *sts.GetCallerIdentityOutput) (*Creator, error)

+ type MockAccessKeyGetter struct

+ func NewMockAccessKeyGetter(ctrl *gomock.Controller) *MockAccessKeyGetter

+ func (m *MockAccessKeyGetter) EXPECT() *MockAccessKeyGetterMockRecorder

+ func (m *MockAccessKeyGetter) GetAWSAccessKeys() (*AccessKey, error)

+ func (m *MockAccessKeyGetter) GetLocalAWSAccessKeys() (*AccessKey, error)

+ type MockAccessKeyGetterMockRecorder struct

+ func (mr *MockAccessKeyGetterMockRecorder) GetAWSAccessKeys() *gomock.Call

+ func (mr *MockAccessKeyGetterMockRecorder) GetLocalAWSAccessKeys() *gomock.Call

+ type MockClient struct

+ func NewMockClient(ctrl *gomock.Controller) *MockClient

+ func (m *MockClient) AddRoleTag(roleName, key, value string) error

+ func (m *MockClient) AttachRolePolicy(roleName, policyARN string) error

+ func (m *MockClient) CheckAdminUserExists(userName string) error

+ func (m *MockClient) CheckAdminUserNotExisting(userName string) error

+ func (m *MockClient) CheckRoleExists(roleName string) (bool, string, error)

+ func (m *MockClient) CheckStackReadyOrNotExisting(stackName string) (bool, *string, error)

+ func (m *MockClient) CreateOpenIDConnectProvider(issuerURL, thumbprint, clusterID string) (string, error)

+ func (m *MockClient) CreateS3Bucket(bucketName, region string) error

+ func (m *MockClient) CreateSecretInSecretsManager(name, secret string) (string, error)

+ func (m *MockClient) DeleteAccountRole(roleName string, managedPolicies bool) error

+ func (m *MockClient) DeleteInlineRolePolicies(roleName string) error

+ func (m *MockClient) DeleteOCMRole(roleARN string, managedPolicies bool) error

+ func (m *MockClient) DeleteOpenIDConnectProvider(providerURL string) error

+ func (m *MockClient) DeleteOperatorRole(roles string, managedPolicies bool) error

+ func (m *MockClient) DeleteOsdCcsAdminUser(stackName string) error

+ func (m *MockClient) DeleteS3Bucket(bucketName string) error

+ func (m *MockClient) DeleteSecretInSecretsManager(secretArn string) error

+ func (m *MockClient) DeleteUserRole(roleName string) error

+ func (m *MockClient) DescribeAvailabilityZones() ([]string, error)

+ func (m *MockClient) DetachRolePolicies(roleName string) error

+ func (m *MockClient) EXPECT() *MockClientMockRecorder

+ func (m *MockClient) EnsureOsdCcsAdminUser(stackName, adminUserName, awsRegion string) (bool, error)

+ func (m *MockClient) EnsurePolicy(policyArn, document, version string, tagList map[string]string, path string) (string, error)

+ func (m *MockClient) EnsureRole(name, policy, permissionsBoundary, version string, tagList map[string]string, ...) (string, error)

+ func (m *MockClient) FetchPublicSubnetMap(subnets []*ec2.Subnet) (map[string]bool, error)

+ func (m *MockClient) FilterVPCsPrivateSubnets(subnets []*ec2.Subnet) ([]*ec2.Subnet, error)

+ func (m *MockClient) FindPolicyARN(operator Operator, version string) (string, error)

+ func (m *MockClient) FindRoleARNs(roleType, version string) ([]string, error)

+ func (m *MockClient) FindRoleARNsClassic(roleType, version string) ([]string, error)

+ func (m *MockClient) FindRoleARNsHostedCp(roleType, version string) ([]string, error)

+ func (m *MockClient) ForceEnsurePolicy(policyArn, document, version string, tagList map[string]string, path string) (string, error)

+ func (m *MockClient) GetAWSAccessKeys() (*AccessKey, error)

+ func (m *MockClient) GetAccountRoleARN(prefix, roleType string) (string, error)

+ func (m *MockClient) GetAccountRoleByArn(roleArn string) (*Role, error)

+ func (m *MockClient) GetAccountRoleForCurrentEnv(env, roleName string) (Role, error)

+ func (m *MockClient) GetAccountRoleForCurrentEnvWithPrefix(env, rolePrefix string, accountRolesMap map[string]AccountRole) ([]Role, error)

+ func (m *MockClient) GetAccountRolePolicies(roles []string) (map[string][]PolicyDetail, error)

+ func (m *MockClient) GetAccountRoleVersion(roleName string) (string, error)

+ func (m *MockClient) GetAccountRolesForCurrentEnv(env, accountID string) ([]Role, error)

+ func (m *MockClient) GetAttachedPolicy(role *string) ([]PolicyDetail, error)

+ func (m *MockClient) GetClusterRegionTagForUser(username string) (string, error)

+ func (m *MockClient) GetCreator() (*Creator, error)

+ func (m *MockClient) GetDefaultPolicyDocument(policyArn string) (string, error)

+ func (m *MockClient) GetIAMCredentials() (credentials.Value, error)

+ func (m *MockClient) GetInstanceProfilesForRole(role string) ([]string, error)

+ func (m *MockClient) GetLocalAWSAccessKeys() (*AccessKey, error)

+ func (m *MockClient) GetOpenIDConnectProviderByClusterIdTag(clusterID string) (string, error)

+ func (m *MockClient) GetOpenIDConnectProviderByOidcEndpointUrl(oidcEndpointUrl string) (string, error)

+ func (m *MockClient) GetOperatorRolesFromAccountByClusterID(clusterID string, credRequests map[string]*v1.STSOperator) ([]string, error)

+ func (m *MockClient) GetOperatorRolesFromAccountByPrefix(prefix string, credRequest map[string]*v1.STSOperator) ([]string, error)

+ func (m *MockClient) GetPolicies(roles []string) (map[string][]string, error)

+ func (m *MockClient) GetRegion() string

+ func (m *MockClient) GetRoleARNPath(prefix string) (string, error)

+ func (m *MockClient) GetRoleByARN(roleARN string) (*iam.Role, error)

+ func (m *MockClient) GetSecurityGroupIds(vpcId string) ([]*ec2.SecurityGroup, error)

+ func (m *MockClient) GetSubnetAvailabilityZone(subnetID string) (string, error)

+ func (m *MockClient) GetVPCPrivateSubnets(subnetID string) ([]*ec2.Subnet, error)

+ func (m *MockClient) GetVPCSubnets(subnetID string) ([]*ec2.Subnet, error)

+ func (m *MockClient) HasHostedCPPolicies(roleARN string) (bool, error)

+ func (m *MockClient) HasManagedPolicies(roleARN string) (bool, error)

+ func (m *MockClient) HasOpenIDConnectProvider(issuerURL, accountID string) (bool, error)

+ func (m *MockClient) HasPermissionsBoundary(roleName string) (bool, error)

+ func (m *MockClient) IsAdminRole(roleName string) (bool, error)

+ func (m *MockClient) IsLocalAvailabilityZone(availabilityZoneName string) (bool, error)

+ func (m *MockClient) IsPolicyCompatible(policyArn, version string) (bool, error)

+ func (m *MockClient) IsPolicyExists(policyARN string) (*iam.GetPolicyOutput, error)

+ func (m *MockClient) IsRolePolicyExists(roleName, policyName string) (*iam.GetRolePolicyOutput, error)

+ func (m *MockClient) IsUpgradedNeededForAccountRolePolicies(rolePrefix, version string) (bool, error)

+ func (m *MockClient) IsUpgradedNeededForAccountRolePoliciesUsingCluster(clusterID *v1.Cluster, version string) (bool, error)

+ func (m *MockClient) IsUpgradedNeededForOperatorRolePoliciesUsingCluster(cluster *v1.Cluster, accountID, version string, ...) (bool, error)

+ func (m *MockClient) IsUpgradedNeededForOperatorRolePoliciesUsingPrefix(rolePrefix, accountID, version string, credRequests map[string]*v1.STSOperator, ...) (bool, error)

+ func (m *MockClient) IsUserRole(roleName *string) (bool, error)

+ func (m *MockClient) ListAccountRoles(version string) ([]Role, error)

+ func (m *MockClient) ListOCMRoles() ([]Role, error)

+ func (m *MockClient) ListOidcProviders(targetClusterId string, config *v1.OidcConfig) ([]OidcProviderOutput, error)

+ func (m *MockClient) ListOperatorRoles(version, clusterID string) (map[string][]OperatorRoleDetail, error)

+ func (m *MockClient) ListSubnets(subnetIds ...string) ([]*ec2.Subnet, error)

+ func (m *MockClient) ListUserRoles() ([]Role, error)

+ func (m *MockClient) PutPublicReadObjectInS3Bucket(bucketName string, body io.ReadSeeker, key string) error

+ func (m *MockClient) PutRolePolicy(roleName, policyName, policy string) error

+ func (m *MockClient) TagUserRegion(username, region string) error

+ func (m *MockClient) UpdateTag(roleName, defaultPolicyVersion string) error

+ func (m *MockClient) ValidateAccountRoleVersionCompatibility(roleName, roleType, minVersion string) (bool, error)

+ func (m *MockClient) ValidateAccountRolesManagedPolicies(prefix string, policies map[string]*v1.AWSSTSPolicy) error

+ func (m *MockClient) ValidateCredentials() (bool, error)

+ func (m *MockClient) ValidateHCPAccountRolesManagedPolicies(prefix string, policies map[string]*v1.AWSSTSPolicy) error

+ func (m *MockClient) ValidateOperatorRolesManagedPolicies(cluster *v1.Cluster, operatorRoles map[string]*v1.STSOperator, ...) error

+ func (m *MockClient) ValidateQuota() (bool, error)

+ func (m *MockClient) ValidateRoleARNAccountIDMatchCallerAccountID(roleARN string) error

+ func (m *MockClient) ValidateRoleNameAvailable(name string) error

+ func (m *MockClient) ValidateSCP(arg0 *string, arg1 map[string]*v1.AWSSTSPolicy) (bool, error)

+ type MockClientMockRecorder struct

+ func (mr *MockClientMockRecorder) AddRoleTag(roleName, key, value interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) AttachRolePolicy(roleName, policyARN interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) CheckAdminUserExists(userName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) CheckAdminUserNotExisting(userName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) CheckRoleExists(roleName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) CheckStackReadyOrNotExisting(stackName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) CreateOpenIDConnectProvider(issuerURL, thumbprint, clusterID interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) CreateS3Bucket(bucketName, region interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) CreateSecretInSecretsManager(name, secret interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) DeleteAccountRole(roleName, managedPolicies interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) DeleteInlineRolePolicies(roleName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) DeleteOCMRole(roleARN, managedPolicies interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) DeleteOpenIDConnectProvider(providerURL interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) DeleteOperatorRole(roles, managedPolicies interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) DeleteOsdCcsAdminUser(stackName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) DeleteS3Bucket(bucketName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) DeleteSecretInSecretsManager(secretArn interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) DeleteUserRole(roleName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) DescribeAvailabilityZones() *gomock.Call

+ func (mr *MockClientMockRecorder) DetachRolePolicies(roleName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) EnsureOsdCcsAdminUser(stackName, adminUserName, awsRegion interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) EnsurePolicy(policyArn, document, version, tagList, path interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) EnsureRole(...) *gomock.Call

+ func (mr *MockClientMockRecorder) FetchPublicSubnetMap(subnets interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) FilterVPCsPrivateSubnets(subnets interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) FindPolicyARN(operator, version interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) FindRoleARNs(roleType, version interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) FindRoleARNsClassic(roleType, version interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) FindRoleARNsHostedCp(roleType, version interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) ForceEnsurePolicy(policyArn, document, version, tagList, path interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetAWSAccessKeys() *gomock.Call

+ func (mr *MockClientMockRecorder) GetAccountRoleARN(prefix, roleType interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetAccountRoleByArn(roleArn interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetAccountRoleForCurrentEnv(env, roleName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetAccountRoleForCurrentEnvWithPrefix(env, rolePrefix, accountRolesMap interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetAccountRolePolicies(roles interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetAccountRoleVersion(roleName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetAccountRolesForCurrentEnv(env, accountID interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetAttachedPolicy(role interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetClusterRegionTagForUser(username interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetCreator() *gomock.Call

+ func (mr *MockClientMockRecorder) GetDefaultPolicyDocument(policyArn interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetIAMCredentials() *gomock.Call

+ func (mr *MockClientMockRecorder) GetInstanceProfilesForRole(role interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetLocalAWSAccessKeys() *gomock.Call

+ func (mr *MockClientMockRecorder) GetOpenIDConnectProviderByClusterIdTag(clusterID interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetOpenIDConnectProviderByOidcEndpointUrl(oidcEndpointUrl interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetOperatorRolesFromAccountByClusterID(clusterID, credRequests interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetOperatorRolesFromAccountByPrefix(prefix, credRequest interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetPolicies(roles interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetRegion() *gomock.Call

+ func (mr *MockClientMockRecorder) GetRoleARNPath(prefix interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetRoleByARN(roleARN interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetSecurityGroupIds(vpcId interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetSubnetAvailabilityZone(subnetID interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetVPCPrivateSubnets(subnetID interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) GetVPCSubnets(subnetID interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) HasHostedCPPolicies(roleARN interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) HasManagedPolicies(roleARN interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) HasOpenIDConnectProvider(issuerURL, accountID interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) HasPermissionsBoundary(roleName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) IsAdminRole(roleName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) IsLocalAvailabilityZone(availabilityZoneName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) IsPolicyCompatible(policyArn, version interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) IsPolicyExists(policyARN interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) IsRolePolicyExists(roleName, policyName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) IsUpgradedNeededForAccountRolePolicies(rolePrefix, version interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) IsUpgradedNeededForAccountRolePoliciesUsingCluster(clusterID, version interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) IsUpgradedNeededForOperatorRolePoliciesUsingCluster(...) *gomock.Call

+ func (mr *MockClientMockRecorder) IsUpgradedNeededForOperatorRolePoliciesUsingPrefix(rolePrefix, accountID, version, credRequests, path interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) IsUserRole(roleName interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) ListAccountRoles(version interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) ListOCMRoles() *gomock.Call

+ func (mr *MockClientMockRecorder) ListOidcProviders(targetClusterId, config interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) ListOperatorRoles(version, clusterID interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) ListSubnets(subnetIds ...interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) ListUserRoles() *gomock.Call

+ func (mr *MockClientMockRecorder) PutPublicReadObjectInS3Bucket(bucketName, body, key interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) PutRolePolicy(roleName, policyName, policy interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) TagUserRegion(username, region interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) UpdateTag(roleName, defaultPolicyVersion interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) ValidateAccountRoleVersionCompatibility(roleName, roleType, minVersion interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) ValidateAccountRolesManagedPolicies(prefix, policies interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) ValidateCredentials() *gomock.Call

+ func (mr *MockClientMockRecorder) ValidateHCPAccountRolesManagedPolicies(prefix, policies interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) ValidateOperatorRolesManagedPolicies(cluster, operatorRoles, policies, hostedCPPolicies interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) ValidateQuota() *gomock.Call

+ func (mr *MockClientMockRecorder) ValidateRoleARNAccountIDMatchCallerAccountID(roleARN interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) ValidateRoleNameAvailable(name interface{}) *gomock.Call

+ func (mr *MockClientMockRecorder) ValidateSCP(arg0, arg1 interface{}) *gomock.Call

Jan 30, 2024

Changes in this version

+ func FromV1TagToV2Tag(tags []*iam.Tag) []iamtypes.Tag

Dec 26, 2023

Changes in this version

type Client

+ FetchPublicSubnetMap func(subnets []*ec2.Subnet) (map[string]bool, error)

Dec 4, 2023

Changes in this version

+ func GenerateAccountRolePolicyFiles(reporter *rprtr.Object, env string, policies map[string]*cmv1.AWSSTSPolicy, ...) error

+ func GenerateOperatorRolePolicyFiles(reporter *rprtr.Object, policies map[string]*cmv1.AWSSTSPolicy, ...) error

Nov 22, 2023

Changes in this version

type Client

+ FindRoleARNsHostedCp func(roleType string, version string) ([]string, error)

Nov 3, 2023

Changes in this version

type Client

+ FindRoleARNsClassic func(roleType string, version string) ([]string, error)

+ ListSubnets func(subnetIds ...string) ([]*ec2.Subnet, error)

Oct 13, 2023

Changes in this version

+ const ControlPlaneAccountRoleType

+ const InstallerAccountRoleType

+ const SupportAccountRoleType

+ const WorkerAccountRoleType

+ func ParseOption(option string) string

+ func SetSecurityGroupOption(securityGroup *ec2.SecurityGroup) string

type Client

+ GetAccountRoleByArn func(roleArn string) (*Role, error)

+ GetSecurityGroupIds func(vpcId string) ([]*ec2.SecurityGroup, error)

+ type Subnet struct

+ AvailabilityZone string

+ OwnerID string

Sep 20, 2023

Changes in this version

type Client

+ GetDefaultPolicyDocument func(policyArn string) (string, error)

type Creator

+ IsGovcloud bool

Aug 25, 2023

Changes in this version

+ const IngressOperatorCloudCredentialsRoleType

+ func SecretManagerArnValidator(input interface{}) error

+ type OperatorRoleDetail struct

+ AttachedPolicies []string

+ ClusterID string

+ ManagedPolicy bool

+ OperatorName string

+ OperatorNamespace string

+ RoleARN string

+ RoleName string

+ Version string

type PolicyDetail

+ PolicyType string

Aug 10, 2023

Changes in this version

type ClientBuilder

+ func (b *ClientBuilder) UseLocalCredentials(value bool) *ClientBuilder

Jul 14, 2023

Changes in this version

+ func GetTagsDelimiter(tags []string) string

type Role

+ ClusterID string

Jun 26, 2023

Changes in this version

+ const HCPSuffixPattern

+ var RoleArnRE = regexp.MustCompile(`^arn:aws[\w-]*:iam::\d{12}:role(?:\/+[\w+=,.@-]+)+$`)

+ func GetResourceIdFromOidcProviderARN(stringARN string) (string, error)

+ func IsHostedCP(cluster *cmv1.Cluster) bool

type Client

+ ListOidcProviders func(targetClusterId string) ([]OidcProviderOutput, error)

+ type OidcProviderOutput struct

+ Arn string

+ ClusterId string

May 17, 2023

Changes in this version

type Client

+ ValidateAccountRoleVersionCompatibility func(roleName string, roleType string, minVersion string) (bool, error)

Apr 24, 2023

Changes in this version

+ const ReadOnlyAnonUserPolicyTemplate

Apr 10, 2023

Changes in this version

+ const HCPInstallerRole

+ const HCPSupportRole

+ const HCPWorkerRole

+ const SecretsManager

+ var HCPAccountRoles = map[string]AccountRole

+ func ComputeOperatorRoleArn(prefix string, operator *cmv1.STSOperator, creator *Creator, path string) string

+ func GenerateOperatorRolePolicyDocByOidcEndpointUrl(oidcEndpointURL string, accountID string, operator *cmv1.STSOperator, ...) (string, error)

+ func GetOperatorPolicyKey(roleType string, hostedCP bool) string

+ func IsHostedCPManagedPolicies(cluster *cmv1.Cluster) bool

+ func IsStandardNamedAccountRole(accountRoleName, roleSuffix string) (bool, string)

type Client

+ FilterVPCsPrivateSubnets func(subnets []*ec2.Subnet) ([]*ec2.Subnet, error)

+ GetOpenIDConnectProviderByClusterIdTag func(clusterID string) (string, error)

+ GetOpenIDConnectProviderByOidcEndpointUrl func(oidcEndpointUrl string) (string, error)

+ GetOperatorRolesFromAccountByClusterID func(clusterID string, credRequests map[string]*cmv1.STSOperator) ([]string, error)

+ GetOperatorRolesFromAccountByPrefix func(prefix string, credRequest map[string]*cmv1.STSOperator) ([]string, error)

+ GetVPCSubnets func(subnetID string) ([]*ec2.Subnet, error)

+ HasHostedCPPolicies func(roleARN string) (bool, error)

+ ListOperatorRoles func(version string) (map[string][]Role, error)

+ ValidateHCPAccountRolesManagedPolicies func(prefix string, policies map[string]*cmv1.AWSSTSPolicy) error

Feb 13, 2023

Changes in this version

+ const InstallerCoreKey

+ const InstallerPrivateLinkKey

+ const InstallerVPCKey

+ func GetAccountRolePolicyKeys(roleType string) []string

type Role

+ ManagedPolicy bool

Feb 8, 2023

Changes in this version

+ func GetResourceIdFromSecretArn(secretArn string) (string, error)

type Client

+ DeleteS3Bucket func(bucketName string) error

+ DeleteSecretInSecretsManager func(secretArn string) error

+ ForceEnsurePolicy func(policyArn string, document string, version string, tagList map[string]string, ...) (string, error)

Jan 24, 2023

Changes in this version

type Client

+ CreateSecretInSecretsManager func(name string, secret string) (string, error)

+ IsUpgradedNeededForAccountRolePoliciesUsingCluster func(clusterID *cmv1.Cluster, version string) (bool, error)

Jan 18, 2023

Changes in this version

+ const AclPublicRead

+ func FindOperatorRoleNameBySTSOperator(cluster *cmv1.Cluster, operator *cmv1.STSOperator) (string, bool)

type Client

+ CreateS3Bucket func(bucketName string, region string) error

+ GetAccountRoleARN func(prefix string, roleType string) (string, error)

+ PutPublicReadObjectInS3Bucket func(bucketName string, body io.ReadSeeker, key string) error

+ ValidateAccountRolesManagedPolicies func(prefix string, policies map[string]*cmv1.AWSSTSPolicy) error

+ ValidateOperatorRolesManagedPolicies func(cluster *cmv1.Cluster, operatorRoles map[string]*cmv1.STSOperator, ...) error

Jan 3, 2023

Changes in this version

+ func GetManagedPolicyARN(policies map[string]*cmv1.AWSSTSPolicy, key string) (string, error)

+ func GetPolicyDetails(policies map[string]*cmv1.AWSSTSPolicy, key string) string

type Client

+ HasManagedPolicies func(cluster *cmv1.Cluster) (bool, error)

Nov 28, 2022

Changes in this version

+ func FindOperatorRoleBySTSOperator(operatorRoles []*cmv1.OperatorIAMRole, operator *cmv1.STSOperator) string

+ func GetAccountRolesArnsMap(cluster *cmv1.Cluster) map[string]string

+ func GetAdminPolicyARN(accountID string, name string, path string) string

+ func GetAdminPolicyName(name string) string

+ func GetInstallerAccountRoleName(cluster *cmv1.Cluster) (string, error)

+ func GetOperatorPolicyName(prefix string, namespace string, name string) string

+ func GetOperatorRolePolicyPrefixFromCluster(cluster *cmv1.Cluster, awsClient Client) (string, error)

+ func GetPathFromAccountRole(cluster *cmv1.Cluster, roleNameSuffix string) (string, error)

+ func GetPrefixFromInstallerAccountRole(cluster *cmv1.Cluster) (string, error)

+ func HasMoreThanOneAttachedPolicy(policiesDetails []PolicyDetail) bool

+ func UpgradeOperatorRolePolicies(reporter *rprtr.Object, awsClient Client, accountID string, prefix string, ...) error

type Client

+ DetachRolePolicies func(roleName string) error

+ GetSubnetAvailabilityZone func(subnetID string) (string, error)

+ IsLocalAvailabilityZone func(availabilityZoneName string) (bool, error)

+ IsUpgradedNeededForOperatorRolePoliciesUsingCluster func(cluster *cmv1.Cluster, accountID string, version string, ...) (bool, error)

type PolicyDetail

+ func FindAllAttachedPolicyDetails(policiesDetails []PolicyDetail) []PolicyDetail

+ func FindFirstAttachedPolicy(policiesDetails []PolicyDetail) PolicyDetail

Oct 3, 2022

Changes in this version

+ var ARNPath = regexp.MustCompile(`^\/[a-zA-Z0-9\/]*\/$`)

+ func ARNPathValidator(input interface{}) error

+ func GetPathFromARN(arnStr string) (string, error)

+ func GetResourceIdFromARN(stringARN string) (string, error)

type Client

+ GetLocalAWSAccessKeys func() (*AccessKey, error)

+ GetRoleARNPath func(prefix string) (string, error)

+ IsUpgradedNeededForAccountRolePoliciesForCluster func(clusterID *cmv1.Cluster, version string) (bool, error)

Jul 20, 2022

Changes in this version

+ func GetJumpAccount(env string) string

+ func GetOIDCProviderARN(accountID string, providerURL string) string

+ func GetPartition() string

Jul 12, 2022

Changes in this version

+ const BYOVPCMultiAZSubnetsCount

+ const BYOVPCSingleAZSubnetsCount

+ func GenerateAddonPolicyDoc(cluster *cmv1.Cluster, accountID string, cr *cmv1.CredentialRequest, ...) (string, error)

+ func GenerateOperatorRolePolicyDoc(cluster *cmv1.Cluster, accountID string, operator *cmv1.STSOperator, ...) (string, error)

+ func ParseSubnet(subnetOption string) string

+ func SetSubnetOption(subnet, zone string) string

+ func ValidateSubnetsCount(multiAZ bool, privateLink bool, subnetsInputCount int) error

type Client

+ DescribeAvailabilityZones func() ([]string, error)

+ GetVPCPrivateSubnets func(subnetID string) ([]*ec2.Subnet, error)

Jun 20, 2022

Changes in this version

+ var UserNoProxyRE = regexp.MustCompile(...)

+ func GetPrefixFromOperatorRole(cluster *cmv1.Cluster) string

+ func HasDuplicates(valSlice []string) (string, bool)

+ func InterpolatePolicyDocument(doc string, replacements map[string]string) string

+ func TrimRoleSuffix(orig, sufix string) string

+ func UserNoProxyDuplicateValidator(input interface{}) error

+ func UserNoProxyValidator(input interface{}) error

type PolicyDocument

+ func NewPolicyDocument() *PolicyDocument

+ func ParsePolicyDocument(doc string) (*PolicyDocument, error)

+ func (p *PolicyDocument) AllowActions(actions ...string)

+ func (p *PolicyDocument) GetAllowedActions() []string

+ func (p *PolicyDocument) IsActionAllowed(wanted string) bool

+ func (p PolicyDocument) String() string

type PolicyStatement

+ func (p *PolicyStatement) GetAWSPrincipals() []string

Apr 18, 2022

Changes in this version

+ func BuildOperatorRolePolicies(prefix string, accountID string, awsClient Client, commands []string) []string

+ func GetFormattedFileName(filename string) string

+ func GetRolePolicyDocument(file string, args ...map[string]string) ([]byte, error)

+ func UpggradeOperatorRolePolicies(reporter *rprtr.Object, awsClient Client, accountID string, prefix string, ...) error

Apr 5, 2022

Changes in this version

+ func BuildOperatorRoleCommands(prefix string, accountID string, awsClient Client) []string

+ func FindMissingOperatorRolesForUpgrade(cluster *cmv1.Cluster, newMinorVersion string) (map[string]Operator, error)

+ func GenerateRolePolicyDoc(cluster *cmv1.Cluster, accountID string, operator Operator) (string, error)

+ func SortRolesByLinkedRole(roles []Role)

+ func UpgradeOperatorPolicies(reporter *rprtr.Object, awsClient Client, accountID string, prefix string) error

type Operator

+ RoleARN string

Mar 7, 2022

Changes in this version

+ func IsOCMRole(roleName *string) bool

+ func RoleARNToRoleName(roleARN string) (string, error)

type Client

+ func CreateNewClientOrExit(logger *logrus.Logger, reporter *reporter.Object) Client

+ DeleteInlineRolePolicies func(roleName string) error

+ DeleteOCMRole func(roleARN string) error

+ DeleteUserRole func(roleName string) error

+ GetAttachedPolicy func(role *string) ([]PolicyDetail, error)

+ HasPermissionsBoundary func(roleName string) (bool, error)

+ IsRolePolicyExists func(roleName string, policyName string) (*iam.GetRolePolicyOutput, error)

+ IsUserRole func(roleName *string) (bool, error)

+ ListOCMRoles func() ([]Role, error)

+ ListUserRoles func() ([]Role, error)

+ ValidateRoleARNAccountIDMatchCallerAccountID func(roleARN string) error

type Operator

+ MinVersion string

type Role

+ Admin string

+ Linked string

Jan 27, 2022

Changes in this version

type Client

+ IsUpgradedNeededForAccountRolePolicies func(rolePrefix string, version string) (bool, error)

+ IsUpgradedNeededForOperatorRolePolicies func(cluster *cmv1.Cluster, accountID string, version string) (bool, error)

+ IsUpgradedNeededForOperatorRolePoliciesUsingPrefix func(rolePrefix string, accountID string, version string) (bool, error)

Dec 8, 2021

Changes in this version

+ var OCMAdminRolePolicyFile = "ocm_admin"

+ func GetOCMRoleName(prefix string, role string, postfix string) string

+ func IsAdminTag(tagsValue []*iam.Tag) bool

type Client

+ AddRoleTag func(roleName string, key string, value string) error

+ IsAdminRole func(roleName string) (bool, error)

Nov 22, 2021

Changes in this version

+ const ModeAuto

+ const ModeManual

+ var Modes = []string

+ var OCMRole = "OCM"

+ var OCMRolePolicyFile = "ocm"

+ var OCMUserRole = "User"

+ var OCMUserRolePolicyFile = "ocm_user"

+ func AddModeFlag(cmd *cobra.Command)

+ func GenerateOperatorPolicyFiles(reporter *rprtr.Object) error

+ func GeneratePolicyFiles(reporter *rprtr.Object, env string) error

+ func GetAccountRoleName(cluster *cmv1.Cluster) (string, error)

+ func GetMode() (string, error)

+ func GetOperatorPolicyARN(accountID string, prefix string, namespace string, name string) string

+ func GetOperatorRoleName(cluster *cmv1.Cluster, operator Operator) string

+ func GetPolicyARN(accountID string, name string) string

+ func GetPolicyName(prefix string, namespace string, name string) string

+ func GetPrefixFromAccountRole(cluster *cmv1.Cluster) (string, error)

+ func GetRoleARN(accountID string, name string) string

+ func GetRoleName(prefix string, role string) string

+ func GetUserRoleName(prefix string, role string, userName string) string

+ func SaveDocument(doc []byte, filename string) error

+ func SetModeKey(key string)

type Client

+ GetAccountRoleVersion func(roleName string) (string, error)

+ IsPolicyCompatible func(policyArn string, version string) (bool, error)

+ IsPolicyExists func(policyARN string) (*iam.GetPolicyOutput, error)

+ IsUpgradedNeededForOperatorRole func(cluster *cmv1.Cluster, accountID string, version string) (bool, error)

+ IsUpgradedNeededForRole func(rolePrefix string, accountID string, version string) (bool, error)

+ UpdateTag func(roleName string) error

+ ValidateRoleNameAvailable func(name string) (err error)

Oct 21, 2021

Changes in this version

+ const Attached

+ const ControlPlaneAccountRole

+ const Inline

+ const InstallerAccountRole

+ const SupportAccountRole

+ const WorkerAccountRole

+ var DefaultPolicyVersion = "4.9"

type Client

+ DeleteAccountRole func(roles string) error

+ DeleteOpenIDConnectProvider func(providerURL string) error

+ DeleteOperatorRole func(roles string) error

+ GetAccountRoleForCurrentEnv func(env string, roleName string) (Role, error)

+ GetAccountRoleForCurrentEnvWithPrefix func(env string, rolePrefix string) ([]Role, error)

+ GetAccountRolePolicies func(roles []string) (map[string][]PolicyDetail, error)

+ GetAccountRolesForCurrentEnv func(env string, accountID string) ([]Role, error)

+ GetInstanceProfilesForRole func(role string) ([]string, error)

+ GetOpenIDConnectProvider func(clusterID string) (string, error)

+ GetOperatorRolesFromAccount func(clusterID string) ([]string, error)

+ GetPolicies func(roles []string) (map[string][]string, error)

+ type CustomRetryer struct

+ func (r CustomRetryer) ShouldRetry(req *request.Request) bool

+ type PolicyDetail struct

+ PolicType string

+ PolicyArn string

+ PolicyName string

Oct 13, 2021

Changes in this version

type Client

+ GetRoleByARN func(roleARN string) (*iam.Role, error)

+ HasCompatibleVersionTags func(iamTags []*iam.Tag, version string) (bool, error)

Sep 30, 2021

Changes in this version

+ func GetTagValues(tagsValue []*iam.Tag) (roleType string, version string)

+ func MarshalRoles(role []Role, b *bytes.Buffer) error

type Client

+ ListAccountRoles func(version string) ([]Role, error)

+ type Policy struct

+ PolicyDocument PolicyDocument

+ PolicyName string

+ type Role struct

+ Policy []Policy

+ RoleARN string

+ RoleName string

+ RolePrefix string

+ RoleType string

+ Version string

Sep 2, 2021

Changes in this version

+ var UserTagKeyRE = regexp.MustCompile(`^[A-Za-zÀ-ȕ0-9_.:/=+\-@]{1,128}$`)

+ var UserTagValueRE = regexp.MustCompile(`^[A-Za-zÀ-ȕ0-9_.:/=+\-@]{0,256}$`)

+ func HasDuplicateTagKey(tags []string) (string, bool)

+ func UserTagDuplicateValidator(input interface{}) error

+ func UserTagValidator(input interface{}) error

type Client

+ FindRoleARNs func(roleType string, version string) ([]string, error)

Aug 20, 2021

Changes in this version

+ func ARNValidator(input interface{}) error

Jul 30, 2021

Changes in this version

+ const OIDCClientIDOpenShift

+ const OIDCClientIDSTSAWS

+ var AccountRoles map[string]AccountRole = map[string]AccountRole

+ var CredentialRequests map[string]Operator = map[string]Operator

+ var DefaultPrefix = "ManagedOpenShift"

+ var JumpAccounts = map[string]string

+ var RoleNameRE = regexp.MustCompile(`^[\w+=,.@-]+$`)

+ func ReadPolicyDocument(path string, args ...map[string]string) ([]byte, error)

+ type AccountRole struct

+ Flag string

+ Name string

type Client

+ AttachRolePolicy func(roleName string, policyARN string) error

+ CheckAdminUserExists func(userName string) (err error)

+ CheckRoleExists func(roleName string) (bool, error)

+ CreateOpenIDConnectProvider func(issuerURL string, thumbprint string) (string, error)

+ EnsurePolicy func(policyArn string, document string, version string, tagList map[string]string) (string, error)

+ EnsureRole func(name string, policy string, version string, tagList map[string]string) (string, error)

+ FindPolicyARN func(operator Operator, version string) (string, error)

+ HasOpenIDConnectProvider func(issuerURL string, accountID string) (bool, error)

+ PutRolePolicy func(roleName string, policyName string, policy string) error

+ type Operator struct

+ Name string

+ Namespace string

+ ServiceAccountNames []string

type PolicyStatement

+ Principal PolicyStatementPrincipal

+ type PolicyStatementPrincipal struct

+ AWS []string

+ Federated string

+ Service []string

Jun 2, 2021

Changes in this version

+ func CheckStackReadyForCreateCluster(reporter *rprtr.Object, logger *logrus.Logger)

type Client

+ func GetAWSClientForUserRegion(reporter *rprtr.Object, logger *logrus.Logger) Client

type Creator

+ IsSTS bool

May 20, 2021

Changes in this version

type Client

+ GetClusterRegionTagForUser func(username string) (string, error)

+ TagUserRegion func(username string, region string) error

Jan 6, 2021

Changes in this version

+ const AdminUserName

+ const DefaultRegion

+ const OsdCcsAdminStackName

+ func GetRegion(region string) (string, error)

+ func GetServiceQuota(serviceQuotas []*servicequotas.ServiceQuota, quotaCode string) (*servicequotas.ServiceQuota, error)

+ func ListServiceQuotas(client *awsClient, serviceCode string) ([]*servicequotas.ServiceQuota, error)

+ type AccessKey struct

+ AccessKeyID string

+ SecretAccessKey string

+ type Client interface

+ CheckAdminUserNotExisting func(userName string) (err error)

+ CheckStackReadyOrNotExisting func(stackName string) (stackReady bool, stackStatus *string, err error)

+ DeleteOsdCcsAdminUser func(stackName string) error

+ EnsureOsdCcsAdminUser func(stackName string, adminUserName string) (bool, error)

+ GetAWSAccessKeys func() (*AccessKey, error)

+ GetCreator func() (*Creator, error)

+ GetIAMCredentials func() (credentials.Value, error)

+ GetRegion func() string

+ GetSubnetIDs func() ([]*ec2.Subnet, error)

+ TagUser func(username string, clusterID string, clusterName string) error

+ ValidateCredentials func() (bool, error)

+ ValidateQuota func() (bool, error)

+ ValidateSCP func(*string) (bool, error)

+ func New(logger *logrus.Logger, iamClient iamiface.IAMAPI, ec2Client ec2iface.EC2API, ...) Client

+ type ClientBuilder struct

+ func NewClient() *ClientBuilder

+ func (b *ClientBuilder) AccessKeys(value *AccessKey) *ClientBuilder

+ func (b *ClientBuilder) Build() (Client, error)

+ func (b *ClientBuilder) BuildSessionWithOptions() (*session.Session, error)

+ func (b *ClientBuilder) BuildSessionWithOptionsCredentials(value *AccessKey) (*session.Session, error)

+ func (b *ClientBuilder) Logger(value *logrus.Logger) *ClientBuilder

+ func (b *ClientBuilder) Region(value string) *ClientBuilder

+ type Creator struct

+ ARN string

+ AccountID string

+ type PolicyDocument struct

+ ID string

+ Statement []PolicyStatement

+ Version string

+ type PolicyStatement struct

+ Action []string

+ Effect string

+ Resource interface{}

+ Sid string

+ type SimulateParams struct

+ Region string