ibm-cloud-sdk-core 5.4.22 → 5.5.0

package/auth/authenticators/vpc-instance-authenticator.d.ts

@@ -21,6 +21,10 @@ export interface Options extends BaseOptions {
     iamProfileCrn?: string;
     /** The ID of the linked trusted IAM profile to be used when obtaining the IAM access token */
     iamProfileId?: string;
+    /** The version of the Instance Metadata Service to be used obtaining tokens */
+    serviceVersion?: string;
+    /** The lifetime of the Instance Identity Token */
+    tokenLifetime?: number;
 }
 /**
  * The VpcInstanceAuthenticator implements an authentication scheme in which it retrieves an "instance identity token"
@@ -36,6 +40,8 @@ export declare class VpcInstanceAuthenticator extends TokenRequestBasedAuthentic
     protected tokenManager: VpcInstanceTokenManager;
     private iamProfileCrn;
     private iamProfileId;
+    private serviceVersion;
+    private tokenLifetime;
     /**
      * Create a new VpcInstanceAuthenticator instance.
      *
@@ -60,6 +66,8 @@ export declare class VpcInstanceAuthenticator extends TokenRequestBasedAuthentic
      * @param iamProfileId - the ID of the linked IAM trusted profile to use when obtaining an IAM access token
      */
     setIamProfileId(iamProfileId: string): void;
+    setServiceVersion(serviceVersion: string): void;
+    setTokenLifetime(tokenLifetime: number): void;
     /**
      * Returns the authenticator's type ('vpc').
      *

package/auth/authenticators/vpc-instance-authenticator.js

@@ -70,6 +70,12 @@ var VpcInstanceAuthenticator = /** @class */ (function (_super) {
         if (options.iamProfileId) {
             _this.iamProfileId = options.iamProfileId;
         }
+        if (options.serviceVersion) {
+            _this.serviceVersion = options.serviceVersion;
+        }
+        if (options.tokenLifetime) {
+            _this.tokenLifetime = options.tokenLifetime;
+        }
         // the param names are shared between the authenticator and the token
         // manager so we can just pass along the options object.
         // also, the token manager will handle input validation
@@ -94,6 +100,14 @@ var VpcInstanceAuthenticator = /** @class */ (function (_super) {
         // update properties in token manager
         this.tokenManager.setIamProfileId(iamProfileId);
     };
+    VpcInstanceAuthenticator.prototype.setServiceVersion = function (serviceVersion) {
+        this.serviceVersion = serviceVersion;
+        this.tokenManager.setServiceVersion(serviceVersion);
+    };
+    VpcInstanceAuthenticator.prototype.setTokenLifetime = function (tokenLifetime) {
+        this.tokenLifetime = tokenLifetime;
+        this.tokenManager.setTokenLifetime(tokenLifetime);
+    };
     /**
      * Returns the authenticator's type ('vpc').
      *

package/auth/token-managers/vpc-instance-token-manager.d.ts

@@ -20,6 +20,10 @@ interface Options extends JwtTokenManagerOptions {
     iamProfileCrn?: string;
     /** The ID of the linked trusted IAM profile to be used when obtaining the IAM access token */
     iamProfileId?: string;
+    /** The version of the Instance Metadata Service to be used obtaining tokens */
+    serviceVersion?: string;
+    /** The lifetime of the Instance Identity Token */
+    tokenLifetime?: number;
 }
 /**
  * Token Manager for VPC Instance Authentication.
@@ -27,6 +31,8 @@ interface Options extends JwtTokenManagerOptions {
 export declare class VpcInstanceTokenManager extends JwtTokenManager {
     private iamProfileCrn;
     private iamProfileId;
+    private serviceVersion;
+    private tokenLifetime;
     /**
      * Create a new VpcInstanceTokenManager instance.
      *
@@ -51,6 +57,10 @@ export declare class VpcInstanceTokenManager extends JwtTokenManager {
      * @param iamProfileId - the ID of the IAM trusted profile
      */
     setIamProfileId(iamProfileId: string): void;
+    setServiceVersion(serviceVersion: string): void;
+    setTokenLifetime(tokenLifetime: number): void;
+    protected getAccessTokenPath(): string;
+    protected getIamTokenPath(): string;
     protected requestToken(): Promise<any>;
     private getInstanceIdentityToken;
     /**

package/auth/token-managers/vpc-instance-token-manager.js

@@ -76,7 +76,14 @@ var build_user_agent_1 = require("../../lib/build-user-agent");
 var jwt_token_manager_1 = require("./jwt-token-manager");
 var DEFAULT_IMS_ENDPOINT = 'http://169.254.169.254';
 var METADATA_SERVICE_VERSION = '2022-03-01';
+var METADATA_SERVICE_VERSION2 = '2025-08-26';
 var IAM_EXPIRATION_WINDOW = 10;
+var METADATA_TOKEN_LIFETIME = 300;
+var DEFAULT_OPERATION_PATH_CREATE_ACCESS_TOKEN = '/instance_identity/v1/token';
+var DEFAULT_OPERATION_PATH_CREATE_IAM_TOKEN = '/instance_identity/v1/iam_token';
+var DEFAULT_OPERATION_PATH_CREATE_ACCESS_TOKEN2 = '/identity/v1/token';
+var DEFAULT_OPERATION_PATH_CREATE_IAM_TOKEN2 = '/identity/v1/iam_tokens';
+var metadataServiceSupportedVersions = [METADATA_SERVICE_VERSION, METADATA_SERVICE_VERSION2];
 /**
  * Token Manager for VPC Instance Authentication.
  */
@@ -104,6 +111,18 @@ var VpcInstanceTokenManager = /** @class */ (function (_super) {
             throw new Error('At most one of `iamProfileId` or `iamProfileCrn` may be specified.');
         }
         _this.url = options.url || DEFAULT_IMS_ENDPOINT;
+        // Validate and set serviceVersion
+        var serviceVersion = options.serviceVersion || METADATA_SERVICE_VERSION;
+        if (!metadataServiceSupportedVersions.includes(serviceVersion)) {
+            throw new Error("Invalid serviceVersion. Must be one of: ".concat(metadataServiceSupportedVersions.join(', ')));
+        }
+        _this.serviceVersion = serviceVersion;
+        // Validate and set tokenLifetime
+        var tokenLifetime = options.tokenLifetime || METADATA_TOKEN_LIFETIME;
+        if (typeof tokenLifetime !== 'number' || tokenLifetime < 0) {
+            throw new Error('tokenLifetime must be a non-negative number');
+        }
+        _this.tokenLifetime = tokenLifetime;
         if (options.iamProfileCrn) {
             _this.iamProfileCrn = options.iamProfileCrn;
         }
@@ -127,6 +146,30 @@ var VpcInstanceTokenManager = /** @class */ (function (_super) {
     VpcInstanceTokenManager.prototype.setIamProfileId = function (iamProfileId) {
         this.iamProfileId = iamProfileId;
     };
+    VpcInstanceTokenManager.prototype.setServiceVersion = function (serviceVersion) {
+        if (!metadataServiceSupportedVersions.includes(serviceVersion)) {
+            throw new Error("Invalid serviceVersion. Must be one of: ".concat(metadataServiceSupportedVersions.join(', ')));
+        }
+        this.serviceVersion = serviceVersion;
+    };
+    VpcInstanceTokenManager.prototype.setTokenLifetime = function (tokenLifetime) {
+        if (typeof tokenLifetime !== 'number' || tokenLifetime < 0) {
+            throw new Error('tokenLifetime must be a non-negative number');
+        }
+        this.tokenLifetime = tokenLifetime;
+    };
+    VpcInstanceTokenManager.prototype.getAccessTokenPath = function () {
+        if (this.serviceVersion === METADATA_SERVICE_VERSION2) {
+            return DEFAULT_OPERATION_PATH_CREATE_ACCESS_TOKEN2;
+        }
+        return DEFAULT_OPERATION_PATH_CREATE_ACCESS_TOKEN;
+    };
+    VpcInstanceTokenManager.prototype.getIamTokenPath = function () {
+        if (this.serviceVersion === METADATA_SERVICE_VERSION2) {
+            return DEFAULT_OPERATION_PATH_CREATE_IAM_TOKEN2;
+        }
+        return DEFAULT_OPERATION_PATH_CREATE_IAM_TOKEN;
+    };
     VpcInstanceTokenManager.prototype.requestToken = function () {
         return __awaiter(this, void 0, void 0, function () {
             var instanceIdentityToken, body, parameters;
@@ -147,9 +190,9 @@ var VpcInstanceTokenManager = /** @class */ (function (_super) {
                         }
                         parameters = {
                             options: {
-                                url: "".concat(this.url, "/instance_identity/v1/iam_token"),
+                                url: "".concat(this.url).concat(this.getIamTokenPath()),
                                 qs: {
-                                    version: METADATA_SERVICE_VERSION,
+                                    version: this.serviceVersion,
                                 },
                                 body: body,
                                 method: 'POST',
@@ -158,6 +201,7 @@ var VpcInstanceTokenManager = /** @class */ (function (_super) {
                                     'User-Agent': this.userAgent,
                                     Accept: 'application/json',
                                     Authorization: "Bearer ".concat(instanceIdentityToken),
+                                    'Metadata-Flavor': 'ibm',
                                 },
                             },
                         };
@@ -178,12 +222,12 @@ var VpcInstanceTokenManager = /** @class */ (function (_super) {
                     case 0:
                         parameters = {
                             options: {
-                                url: "".concat(this.url, "/instance_identity/v1/token"),
+                                url: "".concat(this.url).concat(this.getAccessTokenPath()),
                                 qs: {
-                                    version: METADATA_SERVICE_VERSION,
+                                    version: this.serviceVersion,
                                 },
                                 body: {
-                                    expires_in: 300,
+                                    expires_in: this.tokenLifetime,
                                 },
                                 method: 'PUT',
                                 headers: {

package/docs/ibm-cloud-sdk-core.api.json

@@ -8678,6 +8678,102 @@
               "isAbstract": false,
               "name": "setIamProfileId"
             },
+            {
+              "kind": "Method",
+              "canonicalReference": "ibm-cloud-sdk-core!VpcInstanceAuthenticator#setServiceVersion:member(1)",
+              "docComment": "",
+              "excerptTokens": [
+                {
+                  "kind": "Content",
+                  "text": "setServiceVersion(serviceVersion: "
+                },
+                {
+                  "kind": "Content",
+                  "text": "string"
+                },
+                {
+                  "kind": "Content",
+                  "text": "): "
+                },
+                {
+                  "kind": "Content",
+                  "text": "void"
+                },
+                {
+                  "kind": "Content",
+                  "text": ";"
+                }
+              ],
+              "isStatic": false,
+              "returnTypeTokenRange": {
+                "startIndex": 3,
+                "endIndex": 4
+              },
+              "releaseTag": "Public",
+              "isProtected": false,
+              "overloadIndex": 1,
+              "parameters": [
+                {
+                  "parameterName": "serviceVersion",
+                  "parameterTypeTokenRange": {
+                    "startIndex": 1,
+                    "endIndex": 2
+                  },
+                  "isOptional": false
+                }
+              ],
+              "isOptional": false,
+              "isAbstract": false,
+              "name": "setServiceVersion"
+            },
+            {
+              "kind": "Method",
+              "canonicalReference": "ibm-cloud-sdk-core!VpcInstanceAuthenticator#setTokenLifetime:member(1)",
+              "docComment": "",
+              "excerptTokens": [
+                {
+                  "kind": "Content",
+                  "text": "setTokenLifetime(tokenLifetime: "
+                },
+                {
+                  "kind": "Content",
+                  "text": "number"
+                },
+                {
+                  "kind": "Content",
+                  "text": "): "
+                },
+                {
+                  "kind": "Content",
+                  "text": "void"
+                },
+                {
+                  "kind": "Content",
+                  "text": ";"
+                }
+              ],
+              "isStatic": false,
+              "returnTypeTokenRange": {
+                "startIndex": 3,
+                "endIndex": 4
+              },
+              "releaseTag": "Public",
+              "isProtected": false,
+              "overloadIndex": 1,
+              "parameters": [
+                {
+                  "parameterName": "tokenLifetime",
+                  "parameterTypeTokenRange": {
+                    "startIndex": 1,
+                    "endIndex": 2
+                  },
+                  "isOptional": false
+                }
+              ],
+              "isOptional": false,
+              "isAbstract": false,
+              "name": "setTokenLifetime"
+            },
             {
               "kind": "Property",
               "canonicalReference": "ibm-cloud-sdk-core!VpcInstanceAuthenticator#tokenManager:member",
@@ -8774,6 +8870,68 @@
                 }
               ]
             },
+            {
+              "kind": "Method",
+              "canonicalReference": "ibm-cloud-sdk-core!VpcInstanceTokenManager#getAccessTokenPath:member(1)",
+              "docComment": "",
+              "excerptTokens": [
+                {
+                  "kind": "Content",
+                  "text": "protected getAccessTokenPath(): "
+                },
+                {
+                  "kind": "Content",
+                  "text": "string"
+                },
+                {
+                  "kind": "Content",
+                  "text": ";"
+                }
+              ],
+              "isStatic": false,
+              "returnTypeTokenRange": {
+                "startIndex": 1,
+                "endIndex": 2
+              },
+              "releaseTag": "Public",
+              "isProtected": true,
+              "overloadIndex": 1,
+              "parameters": [],
+              "isOptional": false,
+              "isAbstract": false,
+              "name": "getAccessTokenPath"
+            },
+            {
+              "kind": "Method",
+              "canonicalReference": "ibm-cloud-sdk-core!VpcInstanceTokenManager#getIamTokenPath:member(1)",
+              "docComment": "",
+              "excerptTokens": [
+                {
+                  "kind": "Content",
+                  "text": "protected getIamTokenPath(): "
+                },
+                {
+                  "kind": "Content",
+                  "text": "string"
+                },
+                {
+                  "kind": "Content",
+                  "text": ";"
+                }
+              ],
+              "isStatic": false,
+              "returnTypeTokenRange": {
+                "startIndex": 1,
+                "endIndex": 2
+              },
+              "releaseTag": "Public",
+              "isProtected": true,
+              "overloadIndex": 1,
+              "parameters": [],
+              "isOptional": false,
+              "isAbstract": false,
+              "name": "getIamTokenPath"
+            },
             {
               "kind": "Method",
               "canonicalReference": "ibm-cloud-sdk-core!VpcInstanceTokenManager#isTokenExpired:member(1)",
@@ -8936,6 +9094,102 @@
               "isOptional": false,
               "isAbstract": false,
               "name": "setIamProfileId"
+            },
+            {
+              "kind": "Method",
+              "canonicalReference": "ibm-cloud-sdk-core!VpcInstanceTokenManager#setServiceVersion:member(1)",
+              "docComment": "",
+              "excerptTokens": [
+                {
+                  "kind": "Content",
+                  "text": "setServiceVersion(serviceVersion: "
+                },
+                {
+                  "kind": "Content",
+                  "text": "string"
+                },
+                {
+                  "kind": "Content",
+                  "text": "): "
+                },
+                {
+                  "kind": "Content",
+                  "text": "void"
+                },
+                {
+                  "kind": "Content",
+                  "text": ";"
+                }
+              ],
+              "isStatic": false,
+              "returnTypeTokenRange": {
+                "startIndex": 3,
+                "endIndex": 4
+              },
+              "releaseTag": "Public",
+              "isProtected": false,
+              "overloadIndex": 1,
+              "parameters": [
+                {
+                  "parameterName": "serviceVersion",
+                  "parameterTypeTokenRange": {
+                    "startIndex": 1,
+                    "endIndex": 2
+                  },
+                  "isOptional": false
+                }
+              ],
+              "isOptional": false,
+              "isAbstract": false,
+              "name": "setServiceVersion"
+            },
+            {
+              "kind": "Method",
+              "canonicalReference": "ibm-cloud-sdk-core!VpcInstanceTokenManager#setTokenLifetime:member(1)",
+              "docComment": "",
+              "excerptTokens": [
+                {
+                  "kind": "Content",
+                  "text": "setTokenLifetime(tokenLifetime: "
+                },
+                {
+                  "kind": "Content",
+                  "text": "number"
+                },
+                {
+                  "kind": "Content",
+                  "text": "): "
+                },
+                {
+                  "kind": "Content",
+                  "text": "void"
+                },
+                {
+                  "kind": "Content",
+                  "text": ";"
+                }
+              ],
+              "isStatic": false,
+              "returnTypeTokenRange": {
+                "startIndex": 3,
+                "endIndex": 4
+              },
+              "releaseTag": "Public",
+              "isProtected": false,
+              "overloadIndex": 1,
+              "parameters": [
+                {
+                  "parameterName": "tokenLifetime",
+                  "parameterTypeTokenRange": {
+                    "startIndex": 1,
+                    "endIndex": 2
+                  },
+                  "isOptional": false
+                }
+              ],
+              "isOptional": false,
+              "isAbstract": false,
+              "name": "setTokenLifetime"
             }
           ],
           "extendsTokenRange": {

package/es/auth/authenticators/vpc-instance-authenticator.d.ts

@@ -21,6 +21,10 @@ export interface Options extends BaseOptions {
     iamProfileCrn?: string;
     /** The ID of the linked trusted IAM profile to be used when obtaining the IAM access token */
     iamProfileId?: string;
+    /** The version of the Instance Metadata Service to be used obtaining tokens */
+    serviceVersion?: string;
+    /** The lifetime of the Instance Identity Token */
+    tokenLifetime?: number;
 }
 /**
  * The VpcInstanceAuthenticator implements an authentication scheme in which it retrieves an "instance identity token"
@@ -36,6 +40,8 @@ export declare class VpcInstanceAuthenticator extends TokenRequestBasedAuthentic
     protected tokenManager: VpcInstanceTokenManager;
     private iamProfileCrn;
     private iamProfileId;
+    private serviceVersion;
+    private tokenLifetime;
     /**
      * Create a new VpcInstanceAuthenticator instance.
      *
@@ -60,6 +66,8 @@ export declare class VpcInstanceAuthenticator extends TokenRequestBasedAuthentic
      * @param iamProfileId - the ID of the linked IAM trusted profile to use when obtaining an IAM access token
      */
     setIamProfileId(iamProfileId: string): void;
+    setServiceVersion(serviceVersion: string): void;
+    setTokenLifetime(tokenLifetime: number): void;
     /**
      * Returns the authenticator's type ('vpc').
      *

package/es/auth/authenticators/vpc-instance-authenticator.js

@@ -50,6 +50,12 @@ export class VpcInstanceAuthenticator extends TokenRequestBasedAuthenticator {
         if (options.iamProfileId) {
             this.iamProfileId = options.iamProfileId;
         }
+        if (options.serviceVersion) {
+            this.serviceVersion = options.serviceVersion;
+        }
+        if (options.tokenLifetime) {
+            this.tokenLifetime = options.tokenLifetime;
+        }
         // the param names are shared between the authenticator and the token
         // manager so we can just pass along the options object.
         // also, the token manager will handle input validation
@@ -73,6 +79,14 @@ export class VpcInstanceAuthenticator extends TokenRequestBasedAuthenticator {
         // update properties in token manager
         this.tokenManager.setIamProfileId(iamProfileId);
     }
+    setServiceVersion(serviceVersion) {
+        this.serviceVersion = serviceVersion;
+        this.tokenManager.setServiceVersion(serviceVersion);
+    }
+    setTokenLifetime(tokenLifetime) {
+        this.tokenLifetime = tokenLifetime;
+        this.tokenManager.setTokenLifetime(tokenLifetime);
+    }
     /**
      * Returns the authenticator's type ('vpc').
      *

package/es/auth/token-managers/vpc-instance-token-manager.d.ts

@@ -20,6 +20,10 @@ interface Options extends JwtTokenManagerOptions {
     iamProfileCrn?: string;
     /** The ID of the linked trusted IAM profile to be used when obtaining the IAM access token */
     iamProfileId?: string;
+    /** The version of the Instance Metadata Service to be used obtaining tokens */
+    serviceVersion?: string;
+    /** The lifetime of the Instance Identity Token */
+    tokenLifetime?: number;
 }
 /**
  * Token Manager for VPC Instance Authentication.
@@ -27,6 +31,8 @@ interface Options extends JwtTokenManagerOptions {
 export declare class VpcInstanceTokenManager extends JwtTokenManager {
     private iamProfileCrn;
     private iamProfileId;
+    private serviceVersion;
+    private tokenLifetime;
     /**
      * Create a new VpcInstanceTokenManager instance.
      *
@@ -51,6 +57,10 @@ export declare class VpcInstanceTokenManager extends JwtTokenManager {
      * @param iamProfileId - the ID of the IAM trusted profile
      */
     setIamProfileId(iamProfileId: string): void;
+    setServiceVersion(serviceVersion: string): void;
+    setTokenLifetime(tokenLifetime: number): void;
+    protected getAccessTokenPath(): string;
+    protected getIamTokenPath(): string;
     protected requestToken(): Promise<any>;
     private getInstanceIdentityToken;
     /**

package/es/auth/token-managers/vpc-instance-token-manager.js

@@ -28,7 +28,14 @@ import { buildUserAgent } from '../../lib/build-user-agent';
 import { JwtTokenManager } from './jwt-token-manager';
 const DEFAULT_IMS_ENDPOINT = 'http://169.254.169.254';
 const METADATA_SERVICE_VERSION = '2022-03-01';
+const METADATA_SERVICE_VERSION2 = '2025-08-26';
 const IAM_EXPIRATION_WINDOW = 10;
+const METADATA_TOKEN_LIFETIME = 300;
+const DEFAULT_OPERATION_PATH_CREATE_ACCESS_TOKEN = '/instance_identity/v1/token';
+const DEFAULT_OPERATION_PATH_CREATE_IAM_TOKEN = '/instance_identity/v1/iam_token';
+const DEFAULT_OPERATION_PATH_CREATE_ACCESS_TOKEN2 = '/identity/v1/token';
+const DEFAULT_OPERATION_PATH_CREATE_IAM_TOKEN2 = '/identity/v1/iam_tokens';
+const metadataServiceSupportedVersions = [METADATA_SERVICE_VERSION, METADATA_SERVICE_VERSION2];
 /**
  * Token Manager for VPC Instance Authentication.
  */
@@ -54,6 +61,18 @@ export class VpcInstanceTokenManager extends JwtTokenManager {
             throw new Error('At most one of `iamProfileId` or `iamProfileCrn` may be specified.');
         }
         this.url = options.url || DEFAULT_IMS_ENDPOINT;
+        // Validate and set serviceVersion
+        const serviceVersion = options.serviceVersion || METADATA_SERVICE_VERSION;
+        if (!metadataServiceSupportedVersions.includes(serviceVersion)) {
+            throw new Error(`Invalid serviceVersion. Must be one of: ${metadataServiceSupportedVersions.join(', ')}`);
+        }
+        this.serviceVersion = serviceVersion;
+        // Validate and set tokenLifetime
+        const tokenLifetime = options.tokenLifetime || METADATA_TOKEN_LIFETIME;
+        if (typeof tokenLifetime !== 'number' || tokenLifetime < 0) {
+            throw new Error('tokenLifetime must be a non-negative number');
+        }
+        this.tokenLifetime = tokenLifetime;
         if (options.iamProfileCrn) {
             this.iamProfileCrn = options.iamProfileCrn;
         }
@@ -76,6 +95,30 @@ export class VpcInstanceTokenManager extends JwtTokenManager {
     setIamProfileId(iamProfileId) {
         this.iamProfileId = iamProfileId;
     }
+    setServiceVersion(serviceVersion) {
+        if (!metadataServiceSupportedVersions.includes(serviceVersion)) {
+            throw new Error(`Invalid serviceVersion. Must be one of: ${metadataServiceSupportedVersions.join(', ')}`);
+        }
+        this.serviceVersion = serviceVersion;
+    }
+    setTokenLifetime(tokenLifetime) {
+        if (typeof tokenLifetime !== 'number' || tokenLifetime < 0) {
+            throw new Error('tokenLifetime must be a non-negative number');
+        }
+        this.tokenLifetime = tokenLifetime;
+    }
+    getAccessTokenPath() {
+        if (this.serviceVersion === METADATA_SERVICE_VERSION2) {
+            return DEFAULT_OPERATION_PATH_CREATE_ACCESS_TOKEN2;
+        }
+        return DEFAULT_OPERATION_PATH_CREATE_ACCESS_TOKEN;
+    }
+    getIamTokenPath() {
+        if (this.serviceVersion === METADATA_SERVICE_VERSION2) {
+            return DEFAULT_OPERATION_PATH_CREATE_IAM_TOKEN2;
+        }
+        return DEFAULT_OPERATION_PATH_CREATE_IAM_TOKEN;
+    }
     requestToken() {
         return __awaiter(this, void 0, void 0, function* () {
             const instanceIdentityToken = yield this.getInstanceIdentityToken();
@@ -93,9 +136,9 @@ export class VpcInstanceTokenManager extends JwtTokenManager {
             }
             const parameters = {
                 options: {
-                    url: `${this.url}/instance_identity/v1/iam_token`,
+                    url: `${this.url}${this.getIamTokenPath()}`,
                     qs: {
-                        version: METADATA_SERVICE_VERSION,
+                        version: this.serviceVersion,
                     },
                     body,
                     method: 'POST',
@@ -104,6 +147,7 @@ export class VpcInstanceTokenManager extends JwtTokenManager {
                         'User-Agent': this.userAgent,
                         Accept: 'application/json',
                         Authorization: `Bearer ${instanceIdentityToken}`,
+                        'Metadata-Flavor': 'ibm',
                     },
                 },
             };
@@ -118,12 +162,12 @@ export class VpcInstanceTokenManager extends JwtTokenManager {
         return __awaiter(this, void 0, void 0, function* () {
             const parameters = {
                 options: {
-                    url: `${this.url}/instance_identity/v1/token`,
+                    url: `${this.url}${this.getAccessTokenPath()}`,
                     qs: {
-                        version: METADATA_SERVICE_VERSION,
+                        version: this.serviceVersion,
                     },
                     body: {
-                        expires_in: 300,
+                        expires_in: this.tokenLifetime,
                     },
                     method: 'PUT',
                     headers: {

package/ibm-cloud-sdk-core.d.ts

@@ -1319,6 +1319,10 @@ declare interface Options_10 extends BaseOptions {
     iamProfileCrn?: string;
     /** The ID of the linked trusted IAM profile to be used when obtaining the IAM access token */
     iamProfileId?: string;
+    /** The version of the Instance Metadata Service to be used obtaining tokens */
+    serviceVersion?: string;
+    /** The lifetime of the Instance Identity Token */
+    tokenLifetime?: number;
 }
 
 /**
@@ -1522,6 +1526,10 @@ declare interface Options_9 extends JwtTokenManagerOptions {
     iamProfileCrn?: string;
     /** The ID of the linked trusted IAM profile to be used when obtaining the IAM access token */
     iamProfileId?: string;
+    /** The version of the Instance Metadata Service to be used obtaining tokens */
+    serviceVersion?: string;
+    /** The lifetime of the Instance Identity Token */
+    tokenLifetime?: number;
 }
 
 /**
@@ -1936,6 +1944,8 @@ export declare class VpcInstanceAuthenticator extends TokenRequestBasedAuthentic
     protected tokenManager: VpcInstanceTokenManager;
     private iamProfileCrn;
     private iamProfileId;
+    private serviceVersion;
+    private tokenLifetime;
     /**
      * Create a new VpcInstanceAuthenticator instance.
      *
@@ -1960,6 +1970,8 @@ export declare class VpcInstanceAuthenticator extends TokenRequestBasedAuthentic
      * @param iamProfileId - the ID of the linked IAM trusted profile to use when obtaining an IAM access token
      */
     setIamProfileId(iamProfileId: string): void;
+    setServiceVersion(serviceVersion: string): void;
+    setTokenLifetime(tokenLifetime: number): void;
     /**
      * Returns the authenticator's type ('vpc').
      *
@@ -1974,6 +1986,8 @@ export declare class VpcInstanceAuthenticator extends TokenRequestBasedAuthentic
 export declare class VpcInstanceTokenManager extends JwtTokenManager {
     private iamProfileCrn;
     private iamProfileId;
+    private serviceVersion;
+    private tokenLifetime;
     /**
      * Create a new VpcInstanceTokenManager instance.
      *
@@ -1998,6 +2012,10 @@ export declare class VpcInstanceTokenManager extends JwtTokenManager {
      * @param iamProfileId - the ID of the IAM trusted profile
      */
     setIamProfileId(iamProfileId: string): void;
+    setServiceVersion(serviceVersion: string): void;
+    setTokenLifetime(tokenLifetime: number): void;
+    protected getAccessTokenPath(): string;
+    protected getIamTokenPath(): string;
     protected requestToken(): Promise<any>;
     private getInstanceIdentityToken;
     /**

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "ibm-cloud-sdk-core",
-    "version": "5.4.22",
+    "version": "5.5.0",
     "description": "Core functionality to support SDKs generated with IBM's OpenAPI SDK Generator.",
     "main": "./index.js",
     "typings": "./es/index.d.ts",