constellation/internal/attestation/azure/imds.go

/*
Copyright (c) Edgeless Systems GmbH

SPDX-License-Identifier: AGPL-3.0-only
*/

package azure

import (
	"context"
	"encoding/json"
	"net/http"
)

// Modified version of bootstrapper/cloudprovider/azure/imds.go

const (
	imdsVcekURL = "http://169.254.169.254/metadata/THIM/amd/certification"
)

type imdsClient struct {
	client *http.Client
}

// Retrieve retrieves instance metadata from the azure imds API.
func (c imdsClient) getVcek(ctx context.Context) (vcekResponse, error) {
	req, err := http.NewRequestWithContext(ctx, http.MethodGet, imdsVcekURL, http.NoBody)
	if err != nil {
		return vcekResponse{}, err
	}
	req.Header.Add("Metadata", "True")
	resp, err := c.client.Do(req)
	if err != nil {
		return vcekResponse{}, err
	}
	defer resp.Body.Close()

	var res vcekResponse
	if err := json.NewDecoder(resp.Body).Decode(&res); err != nil {
		return vcekResponse{}, err
	}

	return res, nil
}

type vcekResponse struct {
	VcekCert         string
	CertificateChain string
}