aws

Documentation

Index

• Constants
• func NewProvider(kube client.Client, scope *scope.Cluster) (provider.Provider, error)
• func OpenIDConnectProviderArn(accountID string, bucket string) string
• type AWSCredentials
  • func NewAWSCredentials(ctx context.Context, kube client.Client, cluster *scope.Cluster) (*AWSCredentials, error)
• type AWSPodIdentity
  • func NewAWSPodIdentity(bucketName string, config *aws.Config) *AWSPodIdentity
  • func (pi *AWSPodIdentity) Delete() error
  • func (pi *AWSPodIdentity) Reconcile() error
  • func (pi *AWSPodIdentity) ServiceAccountIssuer() string
• type AWSProvider
  • func (p *AWSProvider) Clean(ctx context.Context) error
  • func (p *AWSProvider) IsInitialized(ctx context.Context) error
  • func (p *AWSProvider) IsReady(ctx context.Context) error
  • func (p *AWSProvider) Precheck(ctx context.Context) error
  • func (p *AWSProvider) Reconcile(ctx context.Context) error

Constants

const (
	AccessKeyDataKey       = "AccessKeyID"     // keep this in sync with https://github.com/kubernetes-sigs/cluster-api-provider-aws/blob/master/pkg/cloud/identity/identity.go#L47
	SecretAccessKeyDataKey = "SecretAccessKey" // keep this in sync with https://github.com/kubernetes-sigs/cluster-api-provider-aws/blob/master/pkg/cloud/identity/identity.go#L48
	SessionTokenDataKey    = "SessionToken"    // keep this in sync with https://github.com/kubernetes-sigs/cluster-api-provider-aws/blob/master/pkg/cloud/identity/identity.go#L49
)

Functions

func NewProvider

func NewProvider(kube client.Client, scope *scope.Cluster) (provider.Provider, error)

func OpenIDConnectProviderArn

func OpenIDConnectProviderArn(accountID string, bucket string) string

Types

type AWSCredentials

type AWSCredentials struct {
	AK    string
	SK    string
	Token string
}

func NewAWSCredentials

func NewAWSCredentials(ctx context.Context, kube client.Client, cluster *scope.Cluster) (*AWSCredentials, error)

type AWSPodIdentity

type AWSPodIdentity struct {
	// contains filtered or unexported fields
}

AWSPodIdentity is a service for creating AWS pod identity folow the guide: https://github.com/aws/amazon-eks-pod-identity-webhook/blob/master/SELF_HOSTED_SETUP.md It will create a S3 bucket and put the OIDC files(pubicl access) and certs(private access) to the bucket, then create a OpenID connect provider.

func NewAWSPodIdentity

func NewAWSPodIdentity(bucketName string, config *aws.Config) *AWSPodIdentity

func (*AWSPodIdentity) Delete

func (pi *AWSPodIdentity) Delete() error

func (*AWSPodIdentity) Reconcile

func (pi *AWSPodIdentity) Reconcile() error

func (*AWSPodIdentity) ServiceAccountIssuer

func (pi *AWSPodIdentity) ServiceAccountIssuer() string

type AWSProvider

type AWSProvider struct {
	Kube client.Client
	// contains filtered or unexported fields
}

func (*AWSProvider) Clean

func (p *AWSProvider) Clean(ctx context.Context) error

func (*AWSProvider) IsInitialized

func (p *AWSProvider) IsInitialized(ctx context.Context) error

func (*AWSProvider) IsReady

func (p *AWSProvider) IsReady(ctx context.Context) error

func (*AWSProvider) Precheck

func (p *AWSProvider) Precheck(ctx context.Context) error

func (*AWSProvider) Reconcile

func (p *AWSProvider) Reconcile(ctx context.Context) error