mirror of
https://github.com/kubernetes-sigs/external-dns.git
synced 2025-08-06 01:26:59 +02:00
114 lines
3.3 KiB
Go
114 lines
3.3 KiB
Go
/*
|
|
Copyright 2023 The Kubernetes Authors.
|
|
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/
|
|
|
|
package aws
|
|
|
|
import (
|
|
"context"
|
|
"fmt"
|
|
|
|
awsv2 "github.com/aws/aws-sdk-go-v2/aws"
|
|
|
|
"github.com/aws/aws-sdk-go-v2/aws/retry"
|
|
"github.com/aws/aws-sdk-go-v2/config"
|
|
stscredsv2 "github.com/aws/aws-sdk-go-v2/credentials/stscreds"
|
|
"github.com/aws/aws-sdk-go-v2/service/sts"
|
|
"github.com/sirupsen/logrus"
|
|
|
|
"sigs.k8s.io/external-dns/pkg/apis/externaldns"
|
|
)
|
|
|
|
// AWSSessionConfig contains configuration to create a new AWS provider.
|
|
type AWSSessionConfig struct {
|
|
AssumeRole string
|
|
AssumeRoleExternalID string
|
|
APIRetries int
|
|
Profile string
|
|
}
|
|
|
|
func CreateDefaultV2Config(cfg *externaldns.Config) awsv2.Config {
|
|
result, err := newV2Config(
|
|
AWSSessionConfig{
|
|
AssumeRole: cfg.AWSAssumeRole,
|
|
AssumeRoleExternalID: cfg.AWSAssumeRoleExternalID,
|
|
APIRetries: cfg.AWSAPIRetries,
|
|
},
|
|
)
|
|
if err != nil {
|
|
logrus.Fatal(err)
|
|
}
|
|
return result
|
|
}
|
|
|
|
func CreateV2Configs(cfg *externaldns.Config) map[string]awsv2.Config {
|
|
result := make(map[string]awsv2.Config)
|
|
if len(cfg.AWSProfiles) == 0 || (len(cfg.AWSProfiles) == 1 && cfg.AWSProfiles[0] == "") {
|
|
cfg := CreateDefaultV2Config(cfg)
|
|
result[defaultAWSProfile] = cfg
|
|
} else {
|
|
for _, profile := range cfg.AWSProfiles {
|
|
cfg, err := newV2Config(
|
|
AWSSessionConfig{
|
|
AssumeRole: cfg.AWSAssumeRole,
|
|
AssumeRoleExternalID: cfg.AWSAssumeRoleExternalID,
|
|
APIRetries: cfg.AWSAPIRetries,
|
|
Profile: profile,
|
|
},
|
|
)
|
|
if err != nil {
|
|
logrus.Fatal(err)
|
|
}
|
|
result[profile] = cfg
|
|
}
|
|
}
|
|
return result
|
|
}
|
|
|
|
func newV2Config(awsConfig AWSSessionConfig) (awsv2.Config, error) {
|
|
defaultOpts := []func(*config.LoadOptions) error{
|
|
config.WithRetryer(func() awsv2.Retryer {
|
|
return retry.AddWithMaxAttempts(retry.NewStandard(), awsConfig.APIRetries)
|
|
}),
|
|
config.WithSharedConfigProfile(awsConfig.Profile),
|
|
config.WithAPIOptions(GetInstrumentationMiddlewares()),
|
|
}
|
|
|
|
cfg, err := config.LoadDefaultConfig(context.Background(), defaultOpts...)
|
|
if err != nil {
|
|
return awsv2.Config{}, fmt.Errorf("instantiating AWS config: %w", err)
|
|
}
|
|
|
|
if awsConfig.AssumeRole != "" {
|
|
stsSvc := sts.NewFromConfig(cfg)
|
|
var assumeRoleOpts []func(*stscredsv2.AssumeRoleOptions)
|
|
if awsConfig.AssumeRoleExternalID != "" {
|
|
logrus.Infof("Assuming role %s with external id", awsConfig.AssumeRole)
|
|
logrus.Debugf("External id: %s", awsConfig.AssumeRoleExternalID)
|
|
assumeRoleOpts = []func(*stscredsv2.AssumeRoleOptions){
|
|
func(opts *stscredsv2.AssumeRoleOptions) {
|
|
opts.ExternalID = &awsConfig.AssumeRoleExternalID
|
|
},
|
|
}
|
|
} else {
|
|
logrus.Infof("Assuming role: %s", awsConfig.AssumeRole)
|
|
}
|
|
creds := stscredsv2.NewAssumeRoleProvider(stsSvc, awsConfig.AssumeRole, assumeRoleOpts...)
|
|
cfg.Credentials = awsv2.NewCredentialsCache(creds)
|
|
}
|
|
|
|
return cfg, nil
|
|
}
|