credential

Documentation

Index

• Constants
• func NewEKMAWSCredentials(cfg CredConfig) (creds.Credentials, error)
• type CredConfig
• type EKMProvider
  • func (s *EKMProvider) ExpiresAt() time.Time
  • func (s *EKMProvider) IsExpired() bool
  • func (s *EKMProvider) Retrieve() (creds.Value, error)

Constants

const (
	TOKEN_TYPE_OIDC        string = "OIDC"
	TOKEN_TYPE_UNSPECIFIED string = "UNSPECIFIED"
)

const (
	ISO8601 = "2006-01-02T15:04:05-0700"
	RFC3339 = "2006-01-02T15:04:05Z07:00"
)

const (
	EKMProviderName = "EKMProvider"
)

Functions

func NewEKMAWSCredentials

func NewEKMAWSCredentials(cfg CredConfig) (creds.Credentials, error)

Types

type CredConfig

type CredConfig struct {
	STSEndpointHost      string
	STSEndpoint          string
	Audience             string
	STSSNI               string
	AttestationTokenPath string
	UseMTLS              bool
	TrustCA              string
	ClientCert           string
	ClientKey            string
	AWSAccessKeyID       string
	AWSRoleArn           string
	AWSRegion            string
	Duration             uint64
	AWSSessionName       string
	UseAssumeRole        bool
}

type EKMProvider

type EKMProvider struct {
	// contains filtered or unexported fields
}

func (*EKMProvider) ExpiresAt

func (s *EKMProvider) ExpiresAt() time.Time

func (*EKMProvider) IsExpired

func (s *EKMProvider) IsExpired() bool

func (*EKMProvider) Retrieve

func (s *EKMProvider) Retrieve() (creds.Value, error)