Obtain EKS token via SDK #2599

Activity

1. georgeboot

   added

   feature-requestA feature should be added or improved.A feature should be added or improved.

   needs-triageThis issue or PR still needs to be triaged.This issue or PR still needs to be triaged.

   on Dec 13, 2022
2. yenfryherrerafeliz commented on Jan 9, 2023

   

   yenfryherrerafeliz

   on Jan 9, 2023

   Contributor

   More actions

   Hi @georgeboot, thanks for opening this feature request. This method it is CLI specific. We can confirm that by looking at the implementation here, which is located at the customization folder. I checked also in other SDKs and this method is also not available.

   In the meantime, I will leave this feature request open but, I do not guarantee we will look at this in the near future since we are working in other backlog items with higher priority.

   Thanks!
3. yenfryherrerafeliz

   added

   p3This is a minor priority issueThis is a minor priority issue

   and removed

   needs-triageThis issue or PR still needs to be triaged.This issue or PR still needs to be triaged.

   on Jan 9, 2023
4. georgeboot commented on Jan 12, 2023

   

   georgeboot

   on Jan 12, 2023

   Last edited by georgeboot

   Author

   More actions

   For anyone else having this issue, this is how I've implemented it:

   use Aws\Signature\SignatureV4;
   use Carbon\Carbon;
   use GuzzleHttp\Psr7\Request;
   
   $region = 'eu-central-1';
   $clusterName = 'test-cluster';
   $expiry = Carbon::now()->addMinutes(15);
   
   $request = new Request('GET', "https://sts.{$region}.amazonaws.com/?Action=GetCallerIdentity&Version=2011-06-15", [
       'x-k8s-aws-id' => $clusterName,
   ]);
   
   $signer = new SignatureV4('sts', $region, []);
   $credentialsProvider = CredentialProvider::defaultProvider()()->wait();
   $signature = $signer->presign($request, $credentialsProvider, $expiry);
   
   // @see https://github.com/aws/aws-cli/commit/3ef2a3cf895cb64cf45a28284ca3291cd1c33755
   $token = 'k8s-aws-v1.'.rtrim(base64_encode($signature->getUri()), '=');