File: //lib/python3/dist-packages/awscli/customizations/eks/__pycache__/get_token.cpython-310.pyc
o
.&�a� � @ s� d dl Z d dlZd dlZd dlmZmZ d dlmZ d dlmZ d dl m
Z
d dl m Z dZ
dZd Zd
Zd Zd Zd
ZdZG dd� de
�ZG dd� de�ZG dd� de�ZdS )� N)�datetime� timedelta)�
RequestSigner)� ServiceId)� BasicCommand)� uni_print�sts�GetCallerIdentityz
2011-06-15�v4�< � z k8s-aws-v1.z x-k8s-aws-idc @ s< e Zd ZdZdZdddd�ddd d�gZd
d � Zd d
� ZdS )�GetTokenCommandz get-tokenz{Get a token for authentication with an Amazon EKS cluster. This can be used as an alternative to the aws-iam-authenticator.z cluster-namezASpecify the name of the Amazon EKS cluster to create a token for.T)�name� help_text�requiredzrole-arnz8Assume this role for credentials when signing the token.Fc C s t �� ttd� }|�d�S )N)�minutesz%Y-%m-%dT%H:%M:%SZ)r �utcnowr �TOKEN_EXPIRATION_MINS�strftime)�self�token_expiration� r �E/usr/lib/python3/dist-packages/awscli/customizations/eks/get_token.py�get_expiration_time; s
z#GetTokenCommand.get_expiration_timec C sb t | j�}|j|j|jd�}t|��|j�}| �� }ddi ||d�d�}t t
� |�� t d� dS )N)� region_name�role_arn�ExecCredentialz%client.authentication.k8s.io/v1alpha1)�expirationTimestamp�token)�kind�
apiVersion�spec�status�
r ) �STSClientFactory�_session�get_sts_client�regionr �TokenGenerator� get_token� cluster_namer r �json�dumps)r � parsed_args�parsed_globals�client_factory�
sts_clientr r � full_objectr r r � _run_main? s"
���
zGetTokenCommand._run_mainN)�__name__�
__module__� __qualname__�NAME� DESCRIPTION� ARG_TABLEr r2 r r r r r
' s ���
r
c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )r( c C �
|| _ d S �N)� _sts_client�r r0 r r r �__init__[ �
zTokenGenerator.__init__c C s. | � |�}tt�|�d���d��d� }|S )z4 Generate a presigned url token to pass to kubectl. zutf-8�=)�_get_presigned_url� TOKEN_PREFIX�base64�urlsafe_b64encode�encode�decode�rstrip)r r* �urlr r r r r) ^ s
� �zTokenGenerator.get_tokenc C s | j jdd|itdd�S )N�get_caller_identity� ClusterName�GET)�Params� ExpiresIn�
HttpMethod)r; �generate_presigned_url� URL_TIMEOUT)r r* r r r r@ e s �z!TokenGenerator._get_presigned_urlN)r3 r4 r5 r= r) r@ r r r r r( Z s r( c @ s> e Zd Zdd� Zddd�Zdd� Zdd � Zd
d � Zd d
� ZdS )r$ c C r9 r: )r% )r �sessionr r r r= o r> zSTSClientFactory.__init__Nc C s` d|i}|d ur | � ||�}|d |d< |d |d< |d |d< | jjd i |��}| �|� |S )
Nr � AccessKeyId�aws_access_key_id�SecretAccessKey�aws_secret_access_key� SessionToken�aws_session_tokenr )r )�_get_role_credentialsr% �
create_client� _register_cluster_name_handlers)r r r �
client_kwargs�credsr r r r r& r s �
z STSClientFactory.get_sts_clientc C s | j �d|�}|j|dd�d S )Nr �EKSGetTokenAuth)�RoleArn�RoleSessionName� Credentials)r% rX � assume_role)r r r r r r r rW s ��z&STSClientFactory._get_role_credentialsc C s( |j j�d| j� |j j�d| j� d S )Nz+provide-client-params.sts.GetCallerIdentityz!before-sign.sts.GetCallerIdentity)�meta�events�register�_retrieve_cluster_name�_inject_cluster_name_headerr< r r r rY � s ��z0STSClientFactory._register_cluster_name_handlersc K s d|v r
|� d�|d< d S d S )NrI � eks_cluster)�pop)r �params�context�kwargsr r r rd � s �z'STSClientFactory._retrieve_cluster_namec K s" d|j v r|j d |jt< d S d S )Nrf )ri �headers�CLUSTER_NAME_HEADER)r �requestrj r r r re � s
���z,STSClientFactory._inject_cluster_name_header)NN) r3 r4 r5 r= r& rW rY rd re r r r r r$ n s
r$ )rB �botocorer+ r r �botocore.signersr �botocore.modelr � awscli.customizations.commandsr �awscli.customizations.utilsr � AUTH_SERVICE� AUTH_COMMAND�AUTH_API_VERSION�AUTH_SIGNING_VERSIONrO r rA rl r
�objectr( r$ r r r r �<module> s& 3