API Reference

CloudBase.Azure.WorkloadIdentityCredentials(; resource, tenant_id, client_id, token_file, authority_host, expireThreshold=Minute(5))

Acquire audience-specific bearer tokens using AKS workload identity. Identity settings default to AZURE_TENANT_ID, AZURE_CLIENT_ID, AZURE_FEDERATED_TOKEN_FILE, and AZURE_AUTHORITY_HOST. Each refresh rereads the projected token file and verifies TLS. Tokens are cached per credential object with synchronized refresh. Missing settings or exchange failures raise without trying storage keys, VM credentials, client secrets, or Azure CLI credentials. Acquisition is lazy. Pass an exact https:// or api:// resource URI; any trailing slash remains part of the audience.

CloudBase.Azure.ManagedIdentityCredentials(; resource, client_id="", expireThreshold=Minute(5))

Acquire audience-specific bearer tokens from Azure VM IMDS. client_id selects a user-assigned identity and defaults to AZURE_CLIENT_ID; an empty ID requests the system-assigned identity. Tokens are cached per credential object with synchronized refresh. IMDS requests bypass proxies and redirects. This provider does not implement App Service's distinct identity endpoint protocol. Pass an exact https:// or api:// resource URI. Transient IMDS failures get up to five retries with exponential delays capped at 60 seconds. Each attempt has a five-second connection timeout and a 30-second request deadline.

CloudBase.Azure.access_token(credentials)

Return a bearer token from workload or managed identity credentials, refreshing before expiry. An unsuccessful refresh raises; an expired or near-expiry token is never returned.

CloudBase.GCP.Credentials(access_token[, expiration]; expireThreshold=Dates.Minute(5))
CloudBase.GCP.Credentials(access_id, secret; region="us-east-1", service="s3", expireThreshold=Dates.Minute(5))
CloudBase.GCP.Credentials(; application_credentials_file=nothing, scopes=[...], expireThreshold=Dates.Minute(5))

Credentials object used for authenticating Google Cloud requests. An explicit bearer token can be provided directly, or GCP.Credentials() can load a service_account application credentials file, a well-known/local ADC file with authorized_user or external_account credentials, or Google metadata-server credentials. A 2-string constructor is also available for Cloud Storage XML HMAC interoperability using the documented AWS4-HMAC-SHA256 simple-migration path.

CloudBase.GCP.Bucket(name)

Object representation of a Google Cloud Storage bucket using the XML API path-style endpoint layout. This is intended to mirror the existing provider store types and unblock downstream storage integrations.

CloudBase.reloadGCECredentials!([root]; service_account="default", expireThreshold=Dates.Minute(5), scopes=[...])

Load fresh Google metadata-server credentials and store them in the internal GCP config cache. This is primarily useful for tests and explicit refresh scenarios.