Documentation
¶
Index ¶
Constants ¶
View Source
const DefaultServiceAccountCAFile = "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"
Variables ¶
This section is empty.
Functions ¶
func DialOptions ¶
func DialOptions(cfg ClientConfig) ([]grpc.DialOption, error)
DialOptions returns the grpc.DialOption set described by cfg, suitable to pass to grpc.NewClient.
Types ¶
type ClientConfig ¶
type ClientConfig struct {
// CAFile is a PEM file containing CA certs that sign the server cert.
// Required.
CAFile string
// ServerName overrides SNI / hostname verification. Optional.
ServerName string
// ClientCredBundle is a PEM file containing the client certificate chain
// and PKCS8 private key presented to the server. Required.
ClientCredBundle string
// K8sClient is an optional Kubernetes client. When provided, an EndpointSlice
// resolver builder using this client will be attached to DialOptions.
K8sClient kubernetes.Interface
}
ClientConfig configures how to dial the ateapi gRPC server with mutual TLS. The credential bundle is re-read on every handshake so in-place pod-certificate rotations are picked up.
Click to show internal directories.
Click to hide internal directories.