Trust me, it's not badly written. It's just way above your head.

config/config.go

@@ -16,6 +16,7 @@ const (
 	certificate        Env.EnvironmentVariable = "CERTIFICATE"
 	sessionDuration    Env.EnvironmentVariable = "SESSION_DURATION"
 	restartDeployments Env.EnvironmentVariable = "RESTART_DEPLOYMENTS"
+	fetchOnly          Env.EnvironmentVariable = "FETCH_ONLY"
 )
 
 type Config struct{}
@@ -64,6 +65,10 @@ func (c Config) Valid() error {
 	return nil
 }
 
+func (Config) FetchOnly() bool {
+	return fetchOnly.GetEnvBool(false)
+}
+
 func (Config) Namespace() string {
 	return namespace.GetEnvString("")
 }

main.go

@@ -18,18 +18,12 @@ func main() {
 		ReportTimestamp: true,
 		TimeFormat:      time.RFC3339,
 	})
+
 	l.Info("Starting credentials refresh")
 
-	client, err := kube_client.NewKubeClient()
-	if err != nil {
-		l.Error("Failed to create kubernetes client", "error", err)
-
-		os.Exit(1)
-	}
-
 	c := appConfig.NewConfig()
 
-	err = c.Valid()
+	err := c.Valid()
 	if err != nil {
 		l.Error("Invalid configuration", "error", err)
 		os.Exit(1)
@@ -41,12 +35,22 @@ func main() {
 		os.Exit(1)
 	}
 
+	if len(privateKey) == 0 {
+		l.Error("Private key is empty")
+		os.Exit(1)
+	}
+
 	certificate, err := base64.StdEncoding.DecodeString(c.Certificate())
 	if err != nil {
 		l.Error("Failed to decode certificate", "error", err)
 		os.Exit(1)
 	}
 
+	if len(certificate) == 0 {
+		l.Error("Certificate is empty")
+		os.Exit(1)
+	}
+
 	credentials, err := cmd.Run(&helper.CredentialsOpts{
 		PrivateKeyId:  string(privateKey),
 		CertificateId: string(certificate),
@@ -67,6 +71,22 @@ func main() {
 
 	l.Info("Credentials refreshed")
 
+	if c.FetchOnly() {
+		l.Info("Fetch only mode, skipping secret update")
+
+		l.Info("AccessKeyId", "access-key-id", credentials.AccessKeyId)
+		l.Info("SecretAccessKey", "secret-access-key", credentials.SecretAccessKey)
+		l.Info("SessionToken", "session-token", credentials.SessionToken)
+		os.Exit(0)
+	}
+
+	client, err := kube_client.NewKubeClient()
+	if err != nil {
+		l.Error("Failed to create kubernetes client", "error", err)
+
+		os.Exit(1)
+	}
+
 	_, err = client.GetSecret(c.Namespace(), c.Secret())
 	if err != nil {
 		l.Error("Failed to get secret", "error", err)