ateapiauth

package
v0.5.0 Latest Latest
Warning

This package is not in the latest version of its module.

Go to latest
Published: Oct 14, 2026 License: Apache-2.0 Imports: 9 Imported by: 0

Documentation

Index

Constants

View Source
const DefaultServiceAccountCAFile = "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt"

Variables

This section is empty.

Functions

func DialOptions

func DialOptions(cfg ClientConfig) ([]grpc.DialOption, error)

DialOptions returns the grpc.DialOption set described by cfg, suitable to pass to grpc.NewClient.

Types

type ClientConfig

type ClientConfig struct {
	// CAFile is a PEM file containing CA certs that sign the server cert.
	// Required.
	CAFile string

	// ServerName overrides SNI / hostname verification. Optional.
	ServerName string

	// ClientCredBundle is a PEM file containing the client certificate chain
	// and PKCS8 private key presented to the server. Required.
	ClientCredBundle string

	// K8sClient is an optional Kubernetes client. When provided, an EndpointSlice
	// resolver builder using this client will be attached to DialOptions.
	K8sClient kubernetes.Interface
}

ClientConfig configures how to dial the ateapi gRPC server with mutual TLS. The credential bundle is re-read on every handshake so in-place pod-certificate rotations are picked up.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL