internal/

Package awsmodel loads the AWS api-2.json service definitions used by the conformance suite.

Package ecrauth mints ECR registry credentials by SigV4-signing GetAuthorizationToken against the Spinifex AWS gateway's ECR endpoint and decoding the returned AWS:<jwt> token into Basic-auth parts.

Package ecsgw is the on-VM SigV4 client the ecs-agent uses to reach the AWS gateway over HTTPS instead of connecting to NATS directly.

Package eksgw is the on-VM SigV4 client used by EKS helpers (eks-gateway-publish, eks-token-webhook) to POST over HTTPS to the AWS gateway instead of NATS.

Package fipsboot enforces FIPS 140-3 at startup via blank import in every binary.

Package guestenv reads the static settings an in-guest binary is configured with at launch.

Package gwsign SigV4-signs on-VM requests to the AWS gateway.

Package imdscreds fetches AWS instance-role credentials from the in-guest IMDS endpoint (169.254.169.254) using IMDSv2.

Package rdsgw is the on-VM SigV4 client the rds-agent uses to reach the AWS gateway over HTTPS, keeping NATS host-internal.

Package stsauth mints task-role credentials by SigV4-signing sts:AssumeRole against the Spinifex AWS gateway.

Package tlsconfig pins the cluster-wide TLS 1.3 curve preference list.