add k8s specific autofreshing provider (#422)

Add autofreshing provider for k8s so that AWS_WEB_IDENTITY_TOKEN_FILE, AWS_ROLE_ARN and AWS_ROLE_SESSION_NAME based auth scheme are automatically detected
swift-nav · Dec 13, 2022 · 1e00f9b · 1e00f9b
1 parent 52551af
commit 1e00f9b
Show file tree

Hide file tree

Showing 4 changed files with 27 additions and 0 deletions.
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/crates/esthri-cli/src/cli_utils.rs b/crates/esthri-cli/src/cli_utils.rs
@@ -180,6 +180,15 @@ pub fn setup_s3client_with_cred_provider() -> Result<S3Client> {
                     Region::default(),
                 ))
             }
+            "k8s" => {
+                let credentials_provider =
+                    AutoRefreshingProvider::new(WebIdentityProvider::from_k8s_env()).unwrap();
+                Ok(S3Client::new_with(
+                    http_client,
+                    credentials_provider,
+                    Region::default(),
+                ))
+            }
             "" => {
                 let credentials_provider = DefaultCredentialsProvider::new().unwrap();
                 Ok(S3Client::new_with(

diff --git a/crates/esthri-internals/Cargo.toml b/crates/esthri-internals/Cargo.toml
@@ -23,6 +23,7 @@ rusoto_core = { version = ">= 0.46, < 1", default-features = false }
 rusoto_credential = { version = ">= 0.46, < 1", default-features = false }
 rusoto_s3 = { version = ">= 0.46, < 1", default-features = false }
 rusoto_signature = { version = ">= 0.46, < 1", default-features = false }
+rusoto_sts = { version = ">= 0.46, < 1", default-features = false }
 
 [dependencies.hyper-tls]
 version = "0.5"

diff --git a/crates/esthri-internals/src/rusoto.rs b/crates/esthri-internals/src/rusoto.rs
@@ -15,3 +15,4 @@ pub use rusoto_credential::DefaultCredentialsProvider;
 
 pub use rusoto_credential::*;
 pub use rusoto_s3::*;
+pub use rusoto_sts::*;