I need a way to simulate aws eks get-token behaviour for aws in the code.

[ls-ivan-kiselev]

Hello there!

Thanks for actively working on rust libraries for AWS APIs, they are enjoyable, really.

I stumbled over a single problem so far and really struggle to overcome it in a simple way, I was hoping maybe somebody did something similar and knows a workaround.

What I am trying to achieve here is to build multiple kubernetes clients with kube-rs crate, taking as an assumption that neither ~/.kube/config or similar are not available, so I am building them from scratch, and my only input that I have at hand is the result of DescribeCluster, e.g. DescribeClusterOutput from eks crate.

Obviously, I have access to STS Apis and whatnot. As far as I understand what I need to do, I need to simulate what aws eks get-token does, and in certain create canonical signed request for AWS.

Which, seems, kinda tedious task to do and seems to belong to the aws-native crates themselves.

Any chances I am missing anything, some examples maybe, which could help me?

[rcoh]

I did a little investigation—this is a high level library implemented by the EKS team for the CLI to actually authenticate to Kubernetes. I think you're best bet would probably be to port that code to Rust: https://github.com/aws/aws-cli/blob/develop/awscli/customizations/eks/get_token.py

Sorry I can't be more helpful.

[ls-ivan-kiselev]

Thanks for the reply, yeah I've seen that too :)

I was just hoping there's easy way to produce signed requests in the Rust SDK, but it seems on the moment of writing this there's none.

[rcoh]

Let me know if https://docs.rs/aws-sig-auth/latest/aws_sig_auth/ is helpful at all

[github-actions[bot]]

Hello! Reopening this discussion to make it searchable.