aws

Documentation

Index

• func BuiltIn() catalog.Plugin
• type Client
• type EC2Client
• type IAMClient
• type IIDAttestorConfig
• type IIDAttestorPlugin
  • func New() *IIDAttestorPlugin
  • func (p *IIDAttestorPlugin) Attest(stream nodeattestor.NodeAttestor_AttestServer) error
  • func (p *IIDAttestorPlugin) Configure(ctx context.Context, req *spi.ConfigureRequest) (*spi.ConfigureResponse, error)
  • func (*IIDAttestorPlugin) GetPluginInfo(context.Context, *spi.GetPluginInfoRequest) (*spi.GetPluginInfoResponse, error)
  • func (p *IIDAttestorPlugin) SetLogger(log hclog.Logger)
• type SessionConfig
  • func (cfg *SessionConfig) Validate(defaultAccessKeyID, defaultSecretAccessKey string) error

Functions

func BuiltIn

func BuiltIn() catalog.Plugin

BuiltIn creates a new built-in plugin

Types

type Client

type Client interface {
	EC2Client
	IAMClient
}

type EC2Client

type EC2Client interface {
	DescribeInstancesWithContext(ctx aws.Context, input *ec2.DescribeInstancesInput, opts ...request.Option) (*ec2.DescribeInstancesOutput, error)
}

EC2Client interface describing used aws ec2client functions, useful for mocking

type IAMClient

type IAMClient interface {
	GetInstanceProfileWithContext(aws.Context, *iam.GetInstanceProfileInput, ...request.Option) (*iam.GetInstanceProfileOutput, error)
}

IAMClient interface describing used aws iamclient functions, useful for mocking

type IIDAttestorConfig

type IIDAttestorConfig struct {
	SessionConfig     `hcl:",squash"`
	SkipBlockDevice   bool     `hcl:"skip_block_device"`
	LocalValidAcctIDs []string `hcl:"account_ids_for_local_validation"`
	AgentPathTemplate string   `hcl:"agent_path_template"`
	// contains filtered or unexported fields
}

IIDAttestorConfig holds hcl configuration for IID attestor plugin

type IIDAttestorPlugin

type IIDAttestorPlugin struct {
	nodeattestorbase.Base
	// contains filtered or unexported fields
}

IIDAttestorPlugin implements node attestation for agents running in aws.

func New

func New() *IIDAttestorPlugin

New creates a new IIDAttestorPlugin.

func (*IIDAttestorPlugin) Attest

func (p *IIDAttestorPlugin) Attest(stream nodeattestor.NodeAttestor_AttestServer) error

Attest implements the server side logic for the aws iid node attestation plugin.

func (*IIDAttestorPlugin) Configure

func (p *IIDAttestorPlugin) Configure(ctx context.Context, req *spi.ConfigureRequest) (*spi.ConfigureResponse, error)

Configure configures the IIDAttestorPlugin.

func (*IIDAttestorPlugin) GetPluginInfo

func (*IIDAttestorPlugin) GetPluginInfo(context.Context, *spi.GetPluginInfoRequest) (*spi.GetPluginInfoResponse, error)

GetPluginInfo returns the version and related metadata of the installed plugin.

func (*IIDAttestorPlugin) SetLogger

func (p *IIDAttestorPlugin) SetLogger(log hclog.Logger)

SetLogger sets this plugin's logger

type SessionConfig

type SessionConfig struct {
	AccessKeyID     string `hcl:"access_key_id"`
	SecretAccessKey string `hcl:"secret_access_key"`
}

SessionConfig is a common config for AWS session config.

func (*SessionConfig) Validate

func (cfg *SessionConfig) Validate(defaultAccessKeyID, defaultSecretAccessKey string) error