Repository navigation
Open
Description
Lines 10 to 30 in 71ef708
| public Credential getCredentials() throws TencentCloudSDKException { | |
| Credential cred; | |
| try { | |
| cred = new EnvironmentVariableCredentialsProvider().getCredentials(); | |
| return cred; | |
| } catch (TencentCloudSDKException e) { | |
| } | |
| try { | |
| cred = new ProfileCredentialsProvider().getCredentials(); | |
| return cred; | |
| } catch (TencentCloudSDKException e) { | |
| } | |
| cred = new CvmRoleCredential(); | |
| if (cred.getSecretId() != null && cred.getSecretKey() != null && cred.getToken() != null) { | |
| return cred; | |
| } | |
| cred = new OIDCRoleArnProvider().getCredentials(); | |
| return cred; |
AWS 的 DefaultCredentialsProvider 顺序是:
- JVM system properties
- 环境变量
- Web Identity Token(EKS IRSA 的
AWS_ROLE_ARN+AWS_WEB_IDENTITY_TOKEN_FILE) - AWS profile
- 容器凭证端点(ECS 等)
- EC2 Instance Profile(IMDS)
但是 tencent 的 DefaultCredentialsProvider 的 CvmRoleCredential 是在 OIDCRoleArnProvider 前面的,而且错误后不会兜底。
Metadata
Metadata
Assignees
Labels
No labels
Activity