Documentation
¶
Overview ¶
Package common holds low-level primitives shared across the aks-node-controller commands.
The HTTP helpers here are the reusable transport/retry mechanics for the check-hotfix network calls (the IMDS attested-token GET and the live-patching-service hotfix-pointer GET) and are intentionally domain-agnostic: callers supply their own timeouts, TLS trust, dial override, overall deadline, and retry policy. Endpoint identity and timeout tuning live with the caller, not here.
TODO(provisioning-hotfix): when the check-lps connectivity client (lps.go) lands in main, have it consume NewBaseTransport too so there is a single canonical HTTP client.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func NewBaseTransport ¶
func NewBaseTransport(opts HTTPTransportOptions) *http.Transport
NewBaseTransport builds an *http.Transport with fail-fast connect/handshake/response timeouts and proxying disabled. Proxying is disabled unconditionally: the LPS client forces its dial to the apiserver front (a proxy CONNECT would defeat the --resolve pin) and IMDS is a link-local endpoint that must never be proxied. Retry and overall-deadline policy are layered by callers.
func RetryStringFetch ¶
func RetryStringFetch(ctx context.Context, maxAttempts int, fn func(context.Context) (string, error)) (string, error)
RetryStringFetch calls fn up to maxAttempts times and returns the first success. It stops early if the context is done, since a retry cannot then succeed. It does NOT sleep between attempts: each attempt is already bounded by its own timeout and the provisioning path wants fail-fast behavior. Used for the IMDS attested-token fetch (one quick retry).
Types ¶
type HTTPTransportOptions ¶
type HTTPTransportOptions struct {
// DialTimeout bounds the TCP connect.
DialTimeout time.Duration
// TLSHandshakeTimeout bounds the TLS handshake (ignored for plain-HTTP endpoints).
TLSHandshakeTimeout time.Duration
// ResponseHeaderTimeout bounds the wait for response headers after the request is written.
ResponseHeaderTimeout time.Duration
// TLSConfig is the TLS client config; nil for plain-HTTP endpoints (e.g. IMDS).
TLSConfig *tls.Config
// DialAddrOverride forces every dial to this host:port regardless of the URL host (the
// curl --resolve equivalent used by the LPS SNI-pin path). Empty means dial the URL host.
DialAddrOverride string
}
HTTPTransportOptions configures the base transport built by NewBaseTransport.
Source Files