imds

type AwsCredentials struct {
	AccessKeyID     string `json:"AccessKeyId"`
	Code            string
	Expiration      time.Time
	LastUpdated     time.Time
	SecretAccessKey string
	Token           string
	Type            string
}

type AwsProvider struct {
	// contains filtered or unexported fields
}

type AwsRoleGetter interface {
	// contains filtered or unexported methods
}

type AwsVaultStsTokenFetcher struct {
	// contains filtered or unexported fields
}

type AzureCredentials struct {
	AccessToken  string `json:"access_token"`
	RefreshToken string `json:"refresh_token"`

	ExpiresIn string `json:"expires_in"`
	ExpiresOn string `json:"expires_on"`
	NotBefore string `json:"not_before"`

	Resource string `json:"resource"`
	Type     string `json:"token_type"`
}

type AzureProvider struct {
	// contains filtered or unexported fields
}

type AzureSubscriptionIDGetter interface {
	// contains filtered or unexported methods
}

type AzureTokenFetcherFactory = func(resource string) (cache.Fetcher[*AzureCredentials], error)

type Config struct {
	// the cloud provider IAM role (e.g. for GCP, the service account)
	IamRole string `yaml:"iam_role"`

	// By default AWS IMDSv1 is disabled
	IMDSv1Allowed bool `yaml:"imds_v1_allowed"`

	// the Vault mount path for GCP
	GcpVaultMountPath string `yaml:"gcp_vault_mount_path"`

	// mapping from gcp project name to the gcp project id
	GcpProjectIds map[string]string `yaml:"gcp_project_ids"`

	// the Vault mount path for AWS
	AwsVaultMountPath string `yaml:"aws_vault_mount_path"`

	// the Vault mount path for Azure
	AzureVaultMountPath string `yaml:"azure_vault_mount_path"`

	// Server configuration
	ServerConfig server.Config `yaml:"server"`

	// the cloud provider (e.g., "aws")
	Provider string `yaml:"provider"`

	// the cloud provider region (e.g., "us-east-1")
	Region string `yaml:"region"`

	// the cloud provider zone (e.g., "us-east-1a")
	Zone string `yaml:"zone"`
}

type GcpCredentials struct {
	Token            string `mapstructure:"token"`
	ExpiresAtSeconds int64  `mapstructure:"expires_at_seconds"`
}

type GcpProvider struct {
	// contains filtered or unexported fields
}

type GcpServiceAccountInfoGetter interface {
	// contains filtered or unexported methods
}

type GcpVaultTokenFetcher struct {
	// contains filtered or unexported fields
}

type HTTPError struct {
	// contains filtered or unexported fields
}

type HandlerFactory struct {
	// contains filtered or unexported fields
}

type InstanceIdentifier interface {
	GetInstanceIdentity(context.Context) (interface{}, error)
}

type MetadataServerConfig struct {
	CloudiamConf  Config
	DDVaultClient *vault.Client

	MetricSink metrics.MetricSink
	Log        *zap.Logger
}

type Provider interface {

	// Name returns the name of the Provider.
	Name() string

	// RegisterHandlers registers HTTP handlers with the server.
	//
	// `mux.Router` parameter is the server and `HandlerFactory` is a factory
	// for creating HTTP Handlers for handling requests.
	RegisterHandlers(router *muxt.Router, factory *HandlerFactory) error
}