IdentityPoolClient

IdentityPoolClient

Defines the Url-sourced and file-sourced external account clients mainly used for K8s and Azure workloads.

Constructor

new IdentityPoolClient(options)

Instantiate an IdentityPoolClient instance using the provided JSON object loaded from an external account credentials file. An error is thrown if the credential is not a valid file-sourced or url-sourced credential or a workforce pool user project is provided with a non workforce audience.

Parameters:
Name Type Description
options

The external account options object typically loaded from the external account JSON credential file. The camelCased options are aliases for the snake_cased options.

Methods

(async) retrieveSubjectToken()

Triggered when a external subject token is needed to be exchanged for a GCP access token via GCP STS endpoint. Gets a subject token by calling the configured SubjectTokenSupplier

Returns:
Type Description

A promise that resolves with the external subject token.