Skip to content

Commit a7394a0

Browse files
committed
feat(VpcInstanceAuthenticator): add support for new VPC authentication flow
This commit introduces the VpcInstanceAuthenticator. This authenticator implements the authentication flow within a VPC-managed compute resource that is configured to use the compute resource identity feature. This involves the use of the compute resource's local VPC Instance Metadata Service API to retrieve an instance identity token, and then exchange that token for an IAM access token. The IAM access token is then used to authenticate outbound REST API requests by adding to the request in the Authorization header.
1 parent 0ec540c commit a7394a0

12 files changed

+1812
-98
lines changed

.secrets.baseline

Lines changed: 42 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
"files": "package-lock.json|go.sum|^.secrets.baseline$",
44
"lines": null
55
},
6-
"generated_at": "2021-08-03T22:01:08Z",
6+
"generated_at": "2021-09-24T13:31:37Z",
77
"plugins_used": [
88
{
99
"name": "AWSKeyDetector"
@@ -70,23 +70,23 @@
7070
"hashed_secret": "98635b2eaa2379f28cd6d72a38299f286b81b459",
7171
"is_secret": false,
7272
"is_verified": false,
73-
"line_number": 385,
73+
"line_number": 540,
7474
"type": "Secret Keyword",
7575
"verified_result": null
7676
},
7777
{
7878
"hashed_secret": "91dfd9ddb4198affc5c194cd8ce6d338fde470e2",
7979
"is_secret": false,
8080
"is_verified": false,
81-
"line_number": 438,
81+
"line_number": 596,
8282
"type": "Secret Keyword",
8383
"verified_result": null
8484
},
8585
{
8686
"hashed_secret": "47fcf185ee7e15fe05cae31fbe9e4ebe4a06a40d",
8787
"is_secret": false,
8888
"is_verified": false,
89-
"line_number": 444,
89+
"line_number": 602,
9090
"type": "Secret Keyword",
9191
"verified_result": null
9292
}
@@ -96,7 +96,7 @@
9696
"hashed_secret": "bc2f74c22f98f7b6ffbc2f67453dbfa99bce9a32",
9797
"is_secret": false,
9898
"is_verified": false,
99-
"line_number": 519,
99+
"line_number": 547,
100100
"type": "Secret Keyword",
101101
"verified_result": null
102102
}
@@ -106,47 +106,47 @@
106106
"hashed_secret": "1f5e25be9b575e9f5d39c82dfd1d9f4d73f1975c",
107107
"is_secret": false,
108108
"is_verified": false,
109-
"line_number": 1116,
109+
"line_number": 1161,
110110
"type": "Secret Keyword",
111111
"verified_result": null
112112
},
113113
{
114114
"hashed_secret": "84ba4ce8a59ed2d6e90726d57cdc4a927d3672b2",
115115
"is_secret": false,
116116
"is_verified": false,
117-
"line_number": 1353,
117+
"line_number": 1398,
118118
"type": "Secret Keyword",
119119
"verified_result": null
120120
},
121121
{
122122
"hashed_secret": "62cdb7020ff920e5aa642c3d4066950dd1f01f4d",
123123
"is_secret": false,
124124
"is_verified": false,
125-
"line_number": 1396,
125+
"line_number": 1441,
126126
"type": "Secret Keyword",
127127
"verified_result": null
128128
},
129129
{
130130
"hashed_secret": "ec7ec9d8ff520250fd5ca955c6474c6d70022407",
131131
"is_secret": false,
132132
"is_verified": false,
133-
"line_number": 1404,
133+
"line_number": 1449,
134134
"type": "JSON Web Token",
135135
"verified_result": null
136136
},
137137
{
138138
"hashed_secret": "40ce4379f5763c05b71c88f9a371809fdbce6a21",
139139
"is_secret": false,
140140
"is_verified": false,
141-
"line_number": 1498,
141+
"line_number": 1543,
142142
"type": "Secret Keyword",
143143
"verified_result": null
144144
},
145145
{
146146
"hashed_secret": "9addbf544119efa4a64223b649750a510f0d463f",
147147
"is_secret": false,
148148
"is_verified": false,
149-
"line_number": 1524,
149+
"line_number": 1569,
150150
"type": "Secret Keyword",
151151
"verified_result": null
152152
}
@@ -190,55 +190,55 @@
190190
"hashed_secret": "e4f50034475acff058e17b35679f8ef1e54f86c5",
191191
"is_secret": false,
192192
"is_verified": false,
193-
"line_number": 48,
193+
"line_number": 50,
194194
"type": "Secret Keyword",
195195
"verified_result": null
196196
},
197197
{
198198
"hashed_secret": "edbd5e119f94badb9f99a67ac6ff4c7a5204ad61",
199199
"is_secret": false,
200200
"is_verified": false,
201-
"line_number": 56,
201+
"line_number": 58,
202202
"type": "Secret Keyword",
203203
"verified_result": null
204204
},
205205
{
206206
"hashed_secret": "0e08371049c621b8a686d4b53a18ada4f7d15111",
207207
"is_secret": false,
208208
"is_verified": false,
209-
"line_number": 63,
209+
"line_number": 65,
210210
"type": "Secret Keyword",
211211
"verified_result": null
212212
},
213213
{
214214
"hashed_secret": "1e95707b2d2cc9086c651c60bb323bb85522b334",
215215
"is_secret": false,
216216
"is_verified": false,
217-
"line_number": 66,
217+
"line_number": 68,
218218
"type": "Secret Keyword",
219219
"verified_result": null
220220
},
221221
{
222222
"hashed_secret": "a7189814f2b74aea88acd2a8b24bed64c9ab43dd",
223223
"is_secret": false,
224224
"is_verified": false,
225-
"line_number": 66,
225+
"line_number": 68,
226226
"type": "Secret Keyword",
227227
"verified_result": null
228228
},
229229
{
230230
"hashed_secret": "f2e7745f43b0ef0e2c2faf61d6c6a28be2965750",
231231
"is_secret": false,
232232
"is_verified": false,
233-
"line_number": 68,
233+
"line_number": 70,
234234
"type": "Secret Keyword",
235235
"verified_result": null
236236
},
237237
{
238238
"hashed_secret": "2a68d46242baf9214502d1dc240a9075a7c6ed55",
239239
"is_secret": false,
240240
"is_verified": false,
241-
"line_number": 76,
241+
"line_number": 78,
242242
"type": "Secret Keyword",
243243
"verified_result": null
244244
}
@@ -248,15 +248,15 @@
248248
"hashed_secret": "fed915afaba64ebcdfeb805d59ea09a33275c423",
249249
"is_secret": false,
250250
"is_verified": false,
251-
"line_number": 159,
251+
"line_number": 157,
252252
"type": "Secret Keyword",
253253
"verified_result": null
254254
},
255255
{
256256
"hashed_secret": "c1bd026029d704c1543f56c9b0817395bec76165",
257257
"is_secret": false,
258258
"is_verified": false,
259-
"line_number": 163,
259+
"line_number": 161,
260260
"type": "Secret Keyword",
261261
"verified_result": null
262262
}
@@ -292,15 +292,15 @@
292292
"hashed_secret": "d4c3d66fd0c38547a3c7a4c6bdc29c36911bc030",
293293
"is_secret": false,
294294
"is_verified": false,
295-
"line_number": 44,
295+
"line_number": 45,
296296
"type": "Secret Keyword",
297297
"verified_result": null
298298
},
299299
{
300300
"hashed_secret": "8318df9ecda039deac9868adf1944a29a95c7114",
301301
"is_secret": false,
302302
"is_verified": false,
303-
"line_number": 46,
303+
"line_number": 47,
304304
"type": "Secret Keyword",
305305
"verified_result": null
306306
}
@@ -577,6 +577,24 @@
577577
"verified_result": null
578578
}
579579
],
580+
"v5/core/vpc_instance_authenticator_test.go": [
581+
{
582+
"hashed_secret": "c8f0df25bade89c1873f5f01b85bcfb921443ac6",
583+
"is_secret": false,
584+
"is_verified": false,
585+
"line_number": 39,
586+
"type": "JSON Web Token",
587+
"verified_result": null
588+
},
589+
{
590+
"hashed_secret": "af83c79c5d4a8d171a2ca5aa132013f3020c518a",
591+
"is_secret": false,
592+
"is_verified": false,
593+
"line_number": 801,
594+
"type": "Secret Keyword",
595+
"verified_result": null
596+
}
597+
],
580598
"v5/resources/ibm-credentials.env": [
581599
{
582600
"hashed_secret": "62cdb7020ff920e5aa642c3d4066950dd1f01f4d",
@@ -656,7 +674,7 @@
656674
"hashed_secret": "9e2659aa7e2b335ec6bdcf180f3b6f41f5191af5",
657675
"is_secret": false,
658676
"is_verified": false,
659-
"line_number": 71,
677+
"line_number": 83,
660678
"type": "Secret Keyword",
661679
"verified_result": null
662680
}
@@ -712,7 +730,7 @@
712730
}
713731
]
714732
},
715-
"version": "0.13.1+ibm.40.dss",
733+
"version": "0.13.1+ibm.46.dss",
716734
"word_list": {
717735
"file": null,
718736
"hash": null

0 commit comments

Comments
 (0)