123456789_123456789_123456789_123456789_123456789_

Class: Mongo::Crypt::KMS::GCP::CredentialsRetriever Private

Do not use. This class is for internal use only.
Relationships & Source Files
Inherits: Object
Defined in: lib/mongo/crypt/kms/gcp/credentials_retriever.rb

Overview

This class retrieves GPC credentials using Google Compute Engine metadata host. This should be used when the driver is used on the Google Compute Engine instance.

Constant Summary

Class Method Summary

Class Method Details

.do_fetch(uri, req) (private)

[ GitHub ] 

  


# File 'lib/mongo/crypt/kms/gcp/credentials_retriever.rb', line 72



def self.do_fetch(uri, req)
  Net::HTTP.start(uri.hostname, uri.port, use_ssl: false) do |http|
    http.request(req)
  end
end


  








  

    .fetch_access_token(timeout_holder = nil)  ⇒ String 
  



  

    

Fetch GCP access token.


  





  
Parameters:



Returns:



Raises:





  [ GitHub ]


  

  


# File 'lib/mongo/crypt/kms/gcp/credentials_retriever.rb', line 40



def self.fetch_access_token(timeout_holder = nil)
  host = ENV.fetch(METADATA_HOST_ENV) { DEFAULT_HOST }
  uri = URI("http://#{host}/computeMetadata/v1/instance/service-accounts/default/token")
  req = Net::HTTP::Get.new(uri)
  req['Metadata-Flavor'] = 'Google'
  resp = fetch_response(uri, req, timeout_holder)
  if resp.code != '200'
    raise KMS::CredentialsNotFound,
      "GCE metadata host responded with code #{resp.code}"
  end
  parsed_resp = JSON.parse(resp.body)
  parsed_resp.fetch('access_token')
rescue JSON::ParserError, KeyError => e
  raise KMS::CredentialsNotFound,
    "GCE metadata response is invalid: '#{resp.body}'; #{e.class}: #{e.message}"
  rescue ::Timeout::Error, IOError, SystemCallError, SocketError => e
    raise KMS::CredentialsNotFound,
          "Could not receive GCP metadata response; #{e.class}: #{e.message}"
end


  








  

    .fetch_response(uri, req, timeout_holder)   (private)
  

  [ GitHub ]


  

  


# File 'lib/mongo/crypt/kms/gcp/credentials_retriever.rb', line 60



def self.fetch_response(uri, req, timeout_holder)
  timeout_holder&.check_timeout!
  if timeout_holder&.timeout?
    ::Timeout.timeout(timeout_holder.remaining_timeout_sec, Error:TimeoutError) do
      do_fetch(uri, req)
    end
  else
    do_fetch(uri, req)
  end
end