add token to support AWS temporary credentials

see https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html Signed-off-by: steven-l <[email protected]>
prometheus · Jul 14, 2022 · 21e7a90 · 21e7a90
1 parent c5e1b60
commit 21e7a90
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 1 deletion.
diff --git a/sigv4/sigv4.go b/sigv4/sigv4.go
@@ -55,7 +55,7 @@ func NewSigV4RoundTripper(cfg *SigV4Config, next http.RoundTripper) (http.RoundT
 		next = http.DefaultTransport
 	}
 
-	creds := credentials.NewStaticCredentials(cfg.AccessKey, string(cfg.SecretKey), "")
+	creds := credentials.NewStaticCredentials(cfg.AccessKey, string(cfg.SecretKey), cfg.Token)
 	if cfg.AccessKey == "" && cfg.SecretKey == "" {
 		creds = nil
 	}

diff --git a/sigv4/sigv4_config.go b/sigv4/sigv4_config.go
@@ -28,6 +28,7 @@ type SigV4Config struct {
 	SecretKey config.Secret `yaml:"secret_key,omitempty"`
 	Profile   string        `yaml:"profile,omitempty"`
 	RoleARN   string        `yaml:"role_arn,omitempty"`
+	Token     string        `yaml:"token,omitempty"`
 }
 
 func (c *SigV4Config) Validate() error {

diff --git a/sigv4/testdata/sigv4_good.yaml b/sigv4/testdata/sigv4_good.yaml
@@ -1,5 +1,6 @@
 region: us-east-2
 access_key: AccessKey
 secret_key: SecretKey
+token: token
 profile: profile
 role_arn: blah:role/arn