diff options
Diffstat (limited to 'vendor/gems/kubeclient/lib/kubeclient/aws_eks_credentials.rb')
| -rw-r--r-- | vendor/gems/kubeclient/lib/kubeclient/aws_eks_credentials.rb | 46 |
1 files changed, 0 insertions, 46 deletions
diff --git a/vendor/gems/kubeclient/lib/kubeclient/aws_eks_credentials.rb b/vendor/gems/kubeclient/lib/kubeclient/aws_eks_credentials.rb deleted file mode 100644 index 9b54b9e06cc..00000000000 --- a/vendor/gems/kubeclient/lib/kubeclient/aws_eks_credentials.rb +++ /dev/null @@ -1,46 +0,0 @@ -# frozen_string_literal: true - -module Kubeclient - # Get a bearer token to authenticate against aws eks. - class AmazonEksCredentials - class AmazonEksDependencyError < LoadError # rubocop:disable Lint/InheritException - end - - class << self - def token(credentials, eks_cluster) - begin - require 'aws-sigv4' - require 'base64' - require 'cgi' - rescue LoadError => e - raise AmazonEksDependencyError, - 'Error requiring aws gems. Kubeclient itself does not include the following ' \ - 'gems: [aws-sigv4]. To support auth-provider eks, you must ' \ - "include it in your calling application. Failed with: #{e.message}" - end - # https://github.com/aws/aws-sdk-ruby/pull/1848 - # Get a signer - # Note - sts only has ONE endpoint (not regional) so 'us-east-1' hardcoding should be OK - signer = Aws::Sigv4::Signer.new( - service: 'sts', - region: 'us-east-1', - credentials: credentials - ) - - # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Sigv4/Signer.html#presign_url-instance_method - presigned_url_string = signer.presign_url( - http_method: 'GET', - url: 'https://sts.amazonaws.com/?Action=GetCallerIdentity&Version=2011-06-15', - body: '', - credentials: credentials, - expires_in: 60, - headers: { - 'X-K8s-Aws-Id' => eks_cluster - } - ) - kube_token = 'k8s-aws-v1.' + Base64.urlsafe_encode64(presigned_url_string.to_s).sub(/=*$/, '') # rubocop:disable Metrics/LineLength - kube_token - end - end - end -end |