[WIP] support explicit session TTLs (#48)

* support explicit session TTLs * Use correct flag * Actually correct flag
FairwindsOps · Oct 12, 2022 · bd425bb · bd425bb
1 parent 3eafee6
commit bd425bb
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 0 deletions.
diff --git a/aws.go b/aws.go
@@ -287,7 +287,11 @@ func (c Config) getAWSCredentials() (*AWSCredentials, error) {
 func (c Config) AWSLogin() (*AWSCredentials, error) {
 	endpoint := fmt.Sprintf("%s/sts/%s", c.Path, c.Role)
 	klog.V(3).Infof("attempting to get aws credentials from vault at %s", endpoint)
+
 	cmd := exec.Command("vault", "write", endpoint, "-format=json")
+	if c.TTL != "" {
+		cmd.Args = append(cmd.Args, fmt.Sprintf("ttl=%s", c.TTL))
+	}
 
 	data, err := cmd.CombinedOutput()
 	if err != nil {

diff --git a/config.go b/config.go
@@ -30,6 +30,7 @@ type Config struct {
 	AWSBaseURL string
 	Path       string
 	Role       string
+	TTL        string
 	// BufferSeconds is the number of seconds to renew before expiration
 	BufferSeconds int64
 }