http

Documentation

Index

• func BuildHTTPClient(cpw *CertPoolWatcher) (*http.Client, error)
• func LogCertificateVerificationError(err error, log logr.Logger) bool
• func LogDockerCertificates(path string, log logr.Logger)
• func NewCertPool(caDir string, log logr.Logger) (*x509.CertPool, error)
• type CertPoolWatcher
  • func NewCertPoolWatcher(caDir string, log logr.Logger) (*CertPoolWatcher, error)
  • func (cpw *CertPoolWatcher) Done()
  • func (cpw *CertPoolWatcher) Get() (*x509.CertPool, int, error)

Functions

func BuildHTTPClient

func BuildHTTPClient(cpw *CertPoolWatcher) (*http.Client, error)

func LogCertificateVerificationError

func LogCertificateVerificationError(err error, log logr.Logger) bool

This function unwraps the given error to find an CertificateVerificationError. It then logs the list of certificates found in the unwrapped error Returns: * true if a CertificateVerificationError is found * false if no CertificateVerificationError is found

func LogDockerCertificates

func LogDockerCertificates(path string, log logr.Logger)

Log the certificates that would be used for docker pull operations Assumes a /etc/docker/certs.d like path, where the directory contains <hostname>:<port> directories in which a CA certificate (generally named "ca.crt") is located.

func NewCertPool

func NewCertPool(caDir string, log logr.Logger) (*x509.CertPool, error)

Types

type CertPoolWatcher

type CertPoolWatcher struct {
	// contains filtered or unexported fields
}

func NewCertPoolWatcher

func NewCertPoolWatcher(caDir string, log logr.Logger) (*CertPoolWatcher, error)

func (*CertPoolWatcher) Done

func (cpw *CertPoolWatcher) Done()

func (*CertPoolWatcher) Get

func (cpw *CertPoolWatcher) Get() (*x509.CertPool, int, error)

Returns the current CertPool and the generation number