tlssecret

Documentation

Index

• type Watcher
  • func NewWatcher(gatekeeperCACertPath, ratifyServerTLSCertPath, ratifyServerTLSKeyPath string) (*Watcher, error)
  • func (w *Watcher) GetConfigForClient(*tls.ClientHelloInfo) (*tls.Config, error)
  • func (w *Watcher) Start() error
  • func (w *Watcher) Stop()

Types

type Watcher

type Watcher struct {
	// contains filtered or unexported fields
}

Watcher is a file watcher that monitors changes to TLS certificate files.

func NewWatcher

func NewWatcher(gatekeeperCACertPath, ratifyServerTLSCertPath, ratifyServerTLSKeyPath string) (*Watcher, error)

NewWatcher creates a new TLS secret watcher.

func (*Watcher) GetConfigForClient

func (w *Watcher) GetConfigForClient(*tls.ClientHelloInfo) (*tls.Config, error)

GetConfigForClient returns the TLS configuration for the tls client.

func (*Watcher) Start

func (w *Watcher) Start() error

Start begins watching the specified files for changes. It adds the ratify server TLS cert and key files to the watcher. If a gatekeeper CA cert path is provided, it adds that file as well.

func (*Watcher) Stop

func (w *Watcher) Stop()

Stop stops the watcher and closes the file watcher.