CacheFilename returns the name of the credential cache file, which can either be set by environment variable, or use the default of ~/.kube/cache/aws-iam-authenticator/credentials.yaml.

NewFileCacheProvider creates a new Provider implementation that wraps a provided Credentials, and works with an on disk cache to speed up credential usage when the cached copy is not expired.

NewGenerator creates a Generator and returns it.

NewSTSError creates a error of type STS.

NewVerifier creates a Verifier that is bound to the clusterID and uses the default http client.

StdinStderrTokenProvider gets MFA token from standard input.

UserHomeDir returns the home directory for the user the process is running under.

FileCacheProvider is a Provider implementation that wraps an underlying Provider (contained in Credentials) and provides caching support for credentials for the specified clusterID, profile, and roleARN (contained in cacheKey).

FormatError is returned when there is a problem with token that is an encoded sts request.

GetTokenOptions is passed to GetWithOptions to provide an extensible get token interface.

Identity is returned on successful Verify() results.

STSError is returned when there was either an error calling STS or a problem processing the data returned from STS.

Token is generated and used by Kubernetes client-go to authenticate with a Kubernetes cluster.

Generator provides new tokens for the AWS IAM Authenticator.

Verifier validates tokens by calling STS and returning the associated identity.