auth

package

v0.0.0-...-7455827 Latest Latest Go to latest Published: Mar 27, 2024 License: Apache-2.0 Imports: 14 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/aws/secrets-store-csi-driver-provider-aws

Links

Open Source Insights

Documentation ¶

Overview ¶

* Package responsible for returning an AWS SDK session with credentials * given an AWS region, K8s namespace, and K8s service account. * * This package requries that the K8s service account be associated with an IAM * role via IAM Roles for Service Accounts (IRSA).

Index ¶

Constants
type Auth
- func NewAuth(ctx context.Context, region, nameSpace, svcAcc string, ...) (auth *Auth, e error)
- func (p Auth) GetAWSSession() (awsSession *session.Session, e error)

Constants ¶

View Source

const (
	ProviderName = "secrets-store-csi-driver-provider-aws"
)

Variables ¶

This section is empty.

Functions ¶

This section is empty.

Types ¶

type Auth ¶

type Auth struct {
	// contains filtered or unexported fields
}

Auth is the main entry point to retrive an AWS session. The caller initializes a new Auth object with NewAuth passing the region, namespace, and K8s service account (and request context). The caller can then obtain AWS sessions by calling GetAWSSession.

func NewAuth ¶

func NewAuth(
	ctx context.Context,
	region, nameSpace, svcAcc string,
	k8sClient k8sv1.CoreV1Interface,
) (auth *Auth, e error)

Factory method to create a new Auth object for an incomming mount request.

func (Auth) GetAWSSession ¶

func (p Auth) GetAWSSession() (awsSession *session.Session, e error)

Get the AWS session credentials associated with a given pod's service account.

The returned session is capable of automatically refreshing creds as needed by using a private TokenFetcher helper.

Source Files ¶

View all Source files

auth.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL