diff --git a/pkg/providers/all/all.go b/pkg/providers/all/all.go index 2d2371676bb..7d4ee389078 100644 --- a/pkg/providers/all/all.go +++ b/pkg/providers/all/all.go @@ -27,6 +27,7 @@ import ( // Alias these methods, so that folks can import this to get all providers. var ( - Enabled = providers.Enabled - Provide = providers.Provide + Enabled = providers.Enabled + Provide = providers.Provide + ExplicitProvide = providers.ExplicitProvide ) diff --git a/pkg/providers/interface.go b/pkg/providers/interface.go index 8ed4f1eaefe..886d61005a9 100644 --- a/pkg/providers/interface.go +++ b/pkg/providers/interface.go @@ -83,3 +83,18 @@ func Provide(ctx context.Context, audience string) (string, error) { } return id, err } + +// ExplicitProvide fetches an OIDC token from the specified provider +func ExplicitProvide(ctx context.Context, audience, provider string) (string, error) { + m.Lock() + defer m.Unlock() + + p, ok := providers[provider] + if !ok { + return "", fmt.Errorf("%s is not a valid provider", provider) + } + if !p.Enabled(ctx) { + return "", fmt.Errorf("provider %s is not enabled, check providers.Enabled() before providers.ExplicitProvide()", provider) + } + return p.Provide(ctx, audience) +}