fswatcher

Documentation

Overview

Package fswatcher implements the Certinel interface by watching for filesystem change events using the cross-platform fsnotify package.

This implementation watches the directory of the configured certificate to properly notice replacements and symlink updates, this allows fswatcher to be used within Kubernetes watching a certificate updated from a mounted ConfigMap or Secret.

Index

• type Sentinel
  • func New(cert, key string) (*Sentinel, error)
  • func (w *Sentinel) GetCertificate(chi *tls.ClientHelloInfo) (*tls.Certificate, error)
  • func (w *Sentinel) GetClientCertificate(cri *tls.CertificateRequestInfo) (*tls.Certificate, error)
  • func (w *Sentinel) Start(ctx context.Context) error

Types

type Sentinel

type Sentinel struct {
	// contains filtered or unexported fields
}

Sentinel watches for filesystem change events that effect the watched certificate.

func New

func New(cert, key string) (*Sentinel, error)

func (*Sentinel) GetCertificate

func (w *Sentinel) GetCertificate(chi *tls.ClientHelloInfo) (*tls.Certificate, error)

func (*Sentinel) GetClientCertificate

func (w *Sentinel) GetClientCertificate(cri *tls.CertificateRequestInfo) (*tls.Certificate, error)

func (*Sentinel) Start

func (w *Sentinel) Start(ctx context.Context) error