aws

Documentation

Index

• func BuiltIn() catalog.BuiltIn
• type Client
• type EC2Client
• type IAMClient
• type IIDAttestorConfig
• type IIDAttestorPlugin
  • func New() *IIDAttestorPlugin
  • func (p *IIDAttestorPlugin) Attest(stream nodeattestorv1.NodeAttestor_AttestServer) error
  • func (p *IIDAttestorPlugin) Configure(ctx context.Context, req *configv1.ConfigureRequest) (*configv1.ConfigureResponse, error)
  • func (p *IIDAttestorPlugin) SetLogger(log hclog.Logger)
• type SessionConfig
  • func (cfg *SessionConfig) Validate(defaultAccessKeyID, defaultSecretAccessKey string) error

Functions

func BuiltIn

func BuiltIn() catalog.BuiltIn

BuiltIn creates a new built-in plugin

Types

type Client

type Client interface {
	EC2Client
	IAMClient
}

type EC2Client

type EC2Client interface {
	DescribeInstancesWithContext(ctx aws.Context, input *ec2.DescribeInstancesInput, opts ...request.Option) (*ec2.DescribeInstancesOutput, error)
}

EC2Client interface describing used aws ec2client functions, useful for mocking

type IAMClient

type IAMClient interface {
	GetInstanceProfileWithContext(aws.Context, *iam.GetInstanceProfileInput, ...request.Option) (*iam.GetInstanceProfileOutput, error)
}

IAMClient interface describing used aws iamclient functions, useful for mocking

type IIDAttestorConfig

type IIDAttestorConfig struct {
	SessionConfig                   `hcl:",squash"`
	SkipBlockDevice                 bool     `hcl:"skip_block_device"`
	DisableInstanceProfileSelectors bool     `hcl:"disable_instance_profile_selectors"`
	LocalValidAcctIDs               []string `hcl:"account_ids_for_local_validation"`
	AgentPathTemplate               string   `hcl:"agent_path_template"`
	AssumeRole                      string   `hcl:"assume_role"`
	// contains filtered or unexported fields
}

IIDAttestorConfig holds hcl configuration for IID attestor plugin

type IIDAttestorPlugin

type IIDAttestorPlugin struct {
	nodeattestorbase.Base
	nodeattestorv1.UnsafeNodeAttestorServer
	configv1.UnsafeConfigServer
	// contains filtered or unexported fields
}

IIDAttestorPlugin implements node attestation for agents running in aws.

func New

func New() *IIDAttestorPlugin

New creates a new IIDAttestorPlugin.

func (*IIDAttestorPlugin) Attest

func (p *IIDAttestorPlugin) Attest(stream nodeattestorv1.NodeAttestor_AttestServer) error

Attest implements the server side logic for the aws iid node attestation plugin.

func (*IIDAttestorPlugin) Configure

func (p *IIDAttestorPlugin) Configure(ctx context.Context, req *configv1.ConfigureRequest) (*configv1.ConfigureResponse, error)

Configure configures the IIDAttestorPlugin.

func (*IIDAttestorPlugin) SetLogger

func (p *IIDAttestorPlugin) SetLogger(log hclog.Logger)

SetLogger sets this plugin's logger

type SessionConfig

type SessionConfig struct {
	AccessKeyID     string `hcl:"access_key_id"`
	SecretAccessKey string `hcl:"secret_access_key"`
	AssumeRole      string `hcl:"assume_role"`
}

SessionConfig is a common config for AWS session config.

func (*SessionConfig) Validate

func (cfg *SessionConfig) Validate(defaultAccessKeyID, defaultSecretAccessKey string) error