Struct EksGetTokenProvider 

pub struct EksGetTokenProvider {
    pub access_key_id: String,
    pub secret_access_key: Secret,
    pub region: String,
    pub cluster_name: String,
}

Mints an EKS get-token credential: a presigned STS GetCallerIdentity URL (SigV4 query auth, scoped to the cluster via the signed x-k8s-aws-id header), base64url- encoded with the k8s-aws-v1. prefix — exactly what aws eks get-token produces and what the kubelet/kubectl send as a bearer token. Fully local: no network, just the account credential and the SigV4 primitives.

Fields

access_key_id: String

secret_access_key: Secret

region: String

cluster_name: String

Implementations

impl EksGetTokenProvider

pub fn token(&self, now_ms: u64) -> String

Build the k8s-aws-v1.<base64url(presigned-url)> token for now_ms.

Trait Implementations

impl CredentialProvider for EksGetTokenProvider

fn mint( &self, now_ms: u64, ) -> Pin<Box<dyn Future<Output = Result<MintedSecret, String>> + Send + '_>>

Mint a fresh secret as of now_ms.

fn refresh_skew_ms(&self) -> u64

Re-mint this many milliseconds before the cached secret expires, to rotate without a gap. Defaults to one minute.