tlsutil

Documentation

Overview

Package tlsutil contains utility functions for TLS operations.

Index

• func ClientKeypair() (string, string)
• func DNSNames(svcName, svcNamespace string) []string
• func HeadlessDNSNames(podName, svcName, svcNamespace string) []string
• func NewClientTLSConfig() (*tls.Config, error)
• func NewClientTLSConfigFromSecret(c client.Client, name, namespace string) (*tls.Config, error)
• func NewServerTLSConfig() (*tls.Config, error)
• func ServerKeypair() (string, string)

Functions

func ClientKeypair

func ClientKeypair() (string, string)

ClientKeypair returns the path to a client certificatee and key.

func DNSNames

func DNSNames(svcName, svcNamespace string) []string

DNSNames returns the cluster DNS names for the given service name and namespace.

func HeadlessDNSNames

func HeadlessDNSNames(podName, svcName, svcNamespace string) []string

HeadlessDNSNames returns the DNS names for a pod in the given headless service name and namespace.

func NewClientTLSConfig

func NewClientTLSConfig() (*tls.Config, error)

NewClientTLSConfig returns a new client TLS configuration for use with connecting to a server requiring mTLS.

func NewClientTLSConfigFromSecret

func NewClientTLSConfigFromSecret(c client.Client, name, namespace string) (*tls.Config, error)

NewClientTLSConfigFromSecret returns a client TLS config from a kubernetes certificate secret.

func NewServerTLSConfig

func NewServerTLSConfig() (*tls.Config, error)

NewServerTLSConfig returns a new server TLS configuration with client certificate verification enabled.

func ServerKeypair

func ServerKeypair() (string, string)

ServerKeypair returns the path to a server certificatee and key.