def _populate_keys_from_metadata_server(self): # get_instance_metadata is imported here because of a circular # dependency. niftycloud.log.debug("Retrieving credentials from metadata server.") from niftycloud.utils import get_instance_metadata timeout = config.getfloat('Niftycloud', 'metadata_service_timeout', 1.0) attempts = config.getint('Niftycloud', 'metadata_service_num_attempts', 1) # The num_retries arg is actually the total number of attempts made, # so the config options is named *_num_attempts to make this more # clear to users. metadata = get_instance_metadata( timeout=timeout, num_retries=attempts, data='meta-data/iam/security-credentials/') if metadata: creds = self._get_credentials_from_metadata(metadata) self._access_key = creds[0] self._secret_key = creds[1] self._security_token = creds[2] expires_at = creds[3] # I'm assuming there's only one role on the instance profile. self._credential_expiry_time = datetime.strptime( expires_at, "%Y-%m-%dT%H:%M:%SZ") niftycloud.log.debug("Retrieved credentials will expire in %s at: %s", self._credential_expiry_time - datetime.now(), expires_at)