Versions in this module Expand all Collapse all v0 v0.22.0 Aug 3, 2026 v0.21.0 Jul 30, 2026 Changes in this version + const SecretCAFile + const SecretCertFile + const SecretKeyFile + var ErrNoCertificate = errors.New("reload: no certificate loaded") + func Watch(ctx context.Context, p Paths, store *Store, opts WatchOptions) error + type Bundle struct + Cert tls.Certificate + Fingerprint string + NotAfter time.Time + RootCAs *x509.CertPool + func BundleFromPEM(certPEM, keyPEM, caPEM []byte) (*Bundle, error) + func LoadBundle(p Paths) (*Bundle, error) + type Metrics interface + ReloadAttempt func(success bool) + SetExpiry func(t time.Time) + func DefaultMetrics(component string) Metrics + type Paths struct + CA string + Cert string + Key string + func FromDir(dir string) Paths + type Reloader struct + func NewReloader(p Paths, component string) (*Reloader, error) + func (r *Reloader) Bundle() *Bundle + func (r *Reloader) GetCertificate(*tls.ClientHelloInfo) (*tls.Certificate, error) + func (r *Reloader) Start(ctx context.Context) error + type Store struct + func NewStore() *Store + func (s *Store) Load() *Bundle + func (s *Store) Store(b *Bundle) + type WatchOptions struct + Component string + Metrics Metrics + OnSwap func(*Bundle)