credentials

Documentation

Index

• func StandardSTSProvider(session *session.Session) stsiface.STSAPI
• func StaticJWTSourceProvider(source JWTSource) ...
• func StaticSTSProvider(sts stsiface.STSAPI) func(*session.Session) stsiface.STSAPI
• type JWTSVIDSource
  • func NewJWTSVIDSource(subject spiffeid.ID, workloadSocket string, audience string, ...) *JWTSVIDSource
  • func (jss *JWTSVIDSource) FetchToken(ctx context.Context) (token string, err error)
• type JWTSource
  • func StandardJWTSourceProvider(subject spiffeid.ID, workloadSocket string, audience string, ...) JWTSource
• type JWTSourceProvider
• type Provider
  • func NewProvider(audience string, roleARN string, jwtSource JWTSource, sessionName string, ...) (*Provider, error)
  • func (sp *Provider) Retrieve() (credentials.Value, error)
• type STSProvider

Functions

func StandardSTSProvider

func StandardSTSProvider(session *session.Session) stsiface.STSAPI

func StaticJWTSourceProvider

func StaticJWTSourceProvider(source JWTSource) func(
	spiffeid.ID,
	string, string,
	*logrus.Logger,
	*telemetry.Telemetry) JWTSource

func StaticSTSProvider

func StaticSTSProvider(sts stsiface.STSAPI) func(*session.Session) stsiface.STSAPI

Types

type JWTSVIDSource

type JWTSVIDSource struct {
	JWTSource
	// contains filtered or unexported fields
}

func NewJWTSVIDSource

func NewJWTSVIDSource(
	subject spiffeid.ID,
	workloadSocket string,
	audience string,
	logger *logrus.Logger,
	telemetry *telemetry.Telemetry) *JWTSVIDSource

func (*JWTSVIDSource) FetchToken

func (jss *JWTSVIDSource) FetchToken(ctx context.Context) (token string, err error)

type JWTSource

type JWTSource interface {
	// FetchToken returns a token
	FetchToken(ctx context.Context) (string, error)
}

JWTSource is the interface Provider uses to fetch JWTs.

func StandardJWTSourceProvider

func StandardJWTSourceProvider(
	subject spiffeid.ID,
	workloadSocket string,
	audience string,
	logger *logrus.Logger,
	telemetry *telemetry.Telemetry) JWTSource

type JWTSourceProvider

type JWTSourceProvider func(
	subject spiffeid.ID,
	workloadSocket string,
	audience string,
	logger *logrus.Logger,
	telemetry *telemetry.Telemetry) JWTSource

type Provider

type Provider struct {
	credentials.Expiry

	Policy      string
	RoleARN     string
	SessionName string
	PolicyARNs  []string

	SessionDuration time.Duration
	RenewWindow     time.Duration
	// contains filtered or unexported fields
}

func NewProvider

func NewProvider(
	audience string,
	roleARN string,
	jwtSource JWTSource,
	sessionName string,
	sessionDuration time.Duration,
	stsClient stsiface.STSAPI,
	telemetry *telemetry.Telemetry,
	logger *logrus.Logger,
) (*Provider, error)

func (*Provider) Retrieve

func (sp *Provider) Retrieve() (credentials.Value, error)

Retrieve returns a set of credentials to use.

type STSProvider

type STSProvider func(*session.Session) stsiface.STSAPI