in sdk/auth/credentials/credentials.go [951:1009]
func (provider *ECSRAMRoleCredentialsProvider) getRoleName() (roleName string, err error) {
connectTimeout := 1 * time.Second
readTimeout := 1 * time.Second
if provider.httpOptions != nil && provider.httpOptions.ConnectTimeout > 0 {
connectTimeout = provider.httpOptions.ConnectTimeout
}
if provider.httpOptions != nil && provider.httpOptions.ReadTimeout > 0 {
readTimeout = provider.httpOptions.ReadTimeout
}
transport := http.DefaultTransport.(*http.Transport).Clone()
transport.DialContext = func(ctx context.Context, network, address string) (net.Conn, error) {
return (&net.Dialer{
Timeout: connectTimeout,
DualStack: true,
}).DialContext(ctx, network, address)
}
httpClient := &http.Client{
Timeout: connectTimeout + readTimeout,
Transport: transport,
}
var securityCredURL = "http://100.100.100.200/latest/meta-data/ram/security-credentials/"
httpRequest, err := hookNewRequest(http.NewRequest)("GET", securityCredURL, strings.NewReader(""))
if err != nil {
err = fmt.Errorf("get role name failed: %s", err.Error())
return
}
metadataToken, err := provider.getMetadataToken()
if err != nil {
return
}
if metadataToken != "" {
httpRequest.Header.Set("X-aliyun-ecs-metadata-token", metadataToken)
}
httpResponse, err := hookDo(httpClient.Do)(httpRequest)
if err != nil {
err = fmt.Errorf("get role name failed: %s", err.Error())
return
}
if httpResponse.StatusCode != http.StatusOK {
err = fmt.Errorf("get role name failed: request %s %d", securityCredURL, httpResponse.StatusCode)
return
}
defer httpResponse.Body.Close()
responseBody, err := ioutil.ReadAll(httpResponse.Body)
if err != nil {
return
}
roleName = strings.TrimSpace(string(responseBody))
return
}