ByCloud Docs

Get workload credentials

bycloud iam workload-credentials --principal <principal> [flags]

Get temporary credentials for a workload (instance, function, container, etc.). Called by infrastructure services (metadata service, function runtime, container orchestrator) to provide credentials to workloads. The principal is identified by a CRN (Cloud Resource Name) in the format: `crn:<region>:<service>:<resource>:<identifier>` Examples: - `crn:spo1:compute:instance:i-550e8400` - `crn:spo1:lambda:function:my-function` - `crn:spo1:container:task:task-abc123`

Options

--output

(-o)

stringoptional

Output format: text, json, or yaml

Values: "text", "json", "yaml"

Default: "text"

Body Options

--principal

stringrequired

CRN of the workload requesting credentials. Format: crn:<region>:<service>:<resource>:<identifier>

--role_name

stringoptional

Specific role to assume (uses workload's default role if omitted)

Command

bycloud iam workload-credentials \
  --principal "value"

Output

ACCESS_KEY_ID      AKIA550E8400E29B41D4
SECRET_ACCESS_KEY  wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
SESSION_TOKEN      FwoGZXIvYXdzEBY...
EXPIRATION         2024-01-15T12:00:00Z
ROLE_NAME          S3ReadOnly