File: //lib/python3.6/site-packages/awscli/customizations/eks/__pycache__/get_token.cpython-36.pyc
3
�T_� � @ s� d dl Z d dlZd dlZd dlmZmZ d dlmZ d dlmZ d dl m
Z
d dl m Z dZ
dZd Zd
Zd Zd Zd
ZdZG dd� de
�ZG dd� de�ZG dd� de�ZdS )� N)�datetime� timedelta)�
RequestSigner)� ServiceId)� BasicCommand)� uni_print�stsZGetCallerIdentityz
2011-06-15Zv4�< � z k8s-aws-v1.z x-k8s-aws-idc @ s< e Zd ZdZdZdddd�ddd d�gZd
d � Zd d
� ZdS )�GetTokenCommandz get-tokenz{Get a token for authentication with an Amazon EKS cluster. This can be used as an alternative to the aws-iam-authenticator.z cluster-namezASpecify the name of the Amazon EKS cluster to create a token for.T)�nameZ help_textZrequiredzrole-arnz8Assume this role for credentials when signing the token.Fc C s t j� ttd� }|jd�S )N)Zminutesz%Y-%m-%dT%H:%M:%SZ)r Zutcnowr �TOKEN_EXPIRATION_MINSZstrftime)�self�token_expiration� r � /usr/lib/python3.6/get_token.py�get_expiration_time; s z#GetTokenCommand.get_expiration_timec C sb t | j�}|j|j|jd�}t|�j|j�}| j� }ddi ||d�d�}t t
j |�� t d� dS )N)� region_name�role_arnZExecCredentialz%client.authentication.k8s.io/v1alpha1)ZexpirationTimestamp�token)ZkindZ
apiVersion�specZstatus�
r ) �STSClientFactory�_session�get_sts_clientZregionr �TokenGenerator� get_token� cluster_namer r �json�dumps)r Z parsed_argsZparsed_globalsZclient_factory�
sts_clientr r Z full_objectr r r � _run_main? s
zGetTokenCommand._run_mainN)�__name__�
__module__� __qualname__�NAMEZ DESCRIPTIONZ ARG_TABLEr r! r r r r r ' s
r c @ s$ e Zd Zdd� Zdd� Zdd� ZdS )r c C s
|| _ d S )N)� _sts_client)r r r r r �__init__[ s zTokenGenerator.__init__c C s. | j |�}ttj|jd��jd�jd� }|S )z4 Generate a presigned url token to pass to kubectl. zutf-8�=)�_get_presigned_url� TOKEN_PREFIX�base64Zurlsafe_b64encode�encode�decode�rstrip)r r Zurlr r r r r ^ s
zTokenGenerator.get_tokenc C s | j jdd|itdd�S )NZget_caller_identity� ClusterNameZGET)ZParamsZ ExpiresInZ
HttpMethod)r& Zgenerate_presigned_url� URL_TIMEOUT)r r r r r r) e s
z!TokenGenerator._get_presigned_urlN)r" r# r$ r' r r) r r r r r Z s r c @ s> e Zd Zdd� Zddd�Zdd� Zdd � Zd
d � Zd d
� ZdS )r c C s
|| _ d S )N)r )r Zsessionr r r r' o s zSTSClientFactory.__init__Nc C s\ d|i}|d k r@| j ||�}|d |d< |d |d< |d |d< | jjd |�}| j|� |S )
Nr Z AccessKeyIdZaws_access_key_idZSecretAccessKeyZaws_secret_access_keyZ SessionTokenZaws_session_tokenr )r )�_get_role_credentialsr �
create_client� _register_cluster_name_handlers)r r r Z
client_kwargsZcredsr r r r r r s
z STSClientFactory.get_sts_clientc C s | j jd|�}|j|dd�d S )Nr ZEKSGetTokenAuth)ZRoleArnZRoleSessionNameZ Credentials)r r2 Z assume_role)r r r r r r r r1 s
z&STSClientFactory._get_role_credentialsc C s( |j jjd| j� |j jjd| j� d S )Nz+provide-client-params.sts.GetCallerIdentityz!before-sign.sts.GetCallerIdentity)�metaZevents�register�_retrieve_cluster_name�_inject_cluster_name_header)r r r r r r3 � s z0STSClientFactory._register_cluster_name_handlersc K s d|kr|j d�|d< d S )Nr/ � eks_cluster)�pop)r Zparams�context�kwargsr r r r6 � s z'STSClientFactory._retrieve_cluster_namec K s d|j kr|j d |jt< d S )Nr8 )r: Zheaders�CLUSTER_NAME_HEADER)r Zrequestr; r r r r7 � s
z,STSClientFactory._inject_cluster_name_header)NN) r" r# r$ r' r r1 r3 r6 r7 r r r r r n s
r )r+ Zbotocorer r r Zbotocore.signersr Zbotocore.modelr Z awscli.customizations.commandsr Zawscli.customizations.utilsr Z AUTH_SERVICEZ AUTH_COMMANDZAUTH_API_VERSIONZAUTH_SIGNING_VERSIONr0 r
r* r< r �objectr r r r r r �<module>
s$ 3