tls

func GenerateX509KeyPair ¶

func GenerateX509KeyPair() (*tls.Certificate, error)

GenerateX509KeyPair generates a X509 key pair

func GenerateX509KeyPairTLSConfig ¶

func GenerateX509KeyPairTLSConfig(tlsMinVersion uint16) (*tls.Config, error)

func GetClientTLSConfig ¶ added in v4.1.0

func GetClientTLSConfig(clientCert, clientKey, caCert string, insecureSkipVerify bool) (*tls.Config, error)

GetClientTLSConfig creates a TLS 1.2 or newer configuration for client connections. Client certificate authentication requires both clientCert and clientKey. If caCert is provided, the certificate authority is used instead of the system roots to verify the server certificate. The insecureSkipVerify parameter controls whether the server's certificate is verified.

func GetServerTLSConfigFromSecret ¶

func GetServerTLSConfigFromSecret(ctx context.Context, kubectlConfig kubernetes.Interface, tlsKubernetesSecretName string, tlsMinVersion uint16, namespace string) (*tls.Config, error)