tlsconfig

Documentation

Overview

+kubebuilder:validation:Optional

Index

• func Module() fx.Option
• type ClientTLSConfig
  • func (in *ClientTLSConfig) DeepCopy() *ClientTLSConfig
  • func (in *ClientTLSConfig) DeepCopyInto(out *ClientTLSConfig)
  • func (c *ClientTLSConfig) GetGRPCDialOptions(insecureEnabled bool) ([]grpc.DialOption, error)
  • func (c *ClientTLSConfig) GetTLSConfig() (*tls.Config, error)
• type Constructor
  • func (constructor Constructor) Annotate() fx.Option
• type ServerTLSConfig
  • func (in *ServerTLSConfig) DeepCopy() *ServerTLSConfig
  • func (in *ServerTLSConfig) DeepCopyInto(out *ServerTLSConfig)

Functions

func Module

func Module() fx.Option

Module is a fx module that constructs annotated instance of *tls.Config.

Types

type ClientTLSConfig

type ClientTLSConfig struct {
	CertFile           string `json:"cert_file" validate:"omitempty,file"`
	KeyFile            string `json:"key_file" validate:"omitempty,file"`
	CAFile             string `json:"ca_file" validate:"omitempty,file"`
	KeyLogWriter       string `json:"key_log_file" validate:"omitempty,file"`
	InsecureSkipVerify bool   `json:"insecure_skip_verify"`
}

ClientTLSConfig is the config for client TLS. swagger:model +kubebuilder:object:generate=true

func (*ClientTLSConfig) DeepCopy

func (in *ClientTLSConfig) DeepCopy() *ClientTLSConfig

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ClientTLSConfig.

func (*ClientTLSConfig) DeepCopyInto

func (in *ClientTLSConfig) DeepCopyInto(out *ClientTLSConfig)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.

func (*ClientTLSConfig) GetGRPCDialOptions

func (c *ClientTLSConfig) GetGRPCDialOptions(insecureEnabled bool) ([]grpc.DialOption, error)

GetGRPCDialOptions creates GRPC DialOptions for TLS.

func (*ClientTLSConfig) GetTLSConfig

func (c *ClientTLSConfig) GetTLSConfig() (*tls.Config, error)

GetTLSConfig initializes tls.Config from config options.

type Constructor

type Constructor struct {
	Name          string
	ConfigKey     string
	DefaultConfig ServerTLSConfig
}

Constructor holds fields to create an annotated instance of *tls.Config.

func (Constructor) Annotate

func (constructor Constructor) Annotate() fx.Option

Annotate creates an annotated instance of *tls.Config.

type ServerTLSConfig

type ServerTLSConfig struct {
	// Path to credentials. This can be set via command line arguments as well.
	CertsPath string `json:"certs_path"`
	// Server Cert file
	ServerCert string `json:"server_cert" default:"ca.crt"`
	// Server Key file
	ServerKey string `json:"server_key" default:"ca.key"`
	// Client CA file
	ClientCA string `json:"client_ca" validate:"omitempty"`
	// Allowed CN
	AllowedCN string `json:"allowed_cn" validate:"omitempty,fqdn"`
	// Enabled TLS
	Enabled bool `json:"enabled" default:"false"`
}

ServerTLSConfig holds configuration for setting up server TLS support. swagger:model +kubebuilder:object:generate=true

func (*ServerTLSConfig) DeepCopy

func (in *ServerTLSConfig) DeepCopy() *ServerTLSConfig

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ServerTLSConfig.

func (*ServerTLSConfig) DeepCopyInto

func (in *ServerTLSConfig) DeepCopyInto(out *ServerTLSConfig)

DeepCopyInto is an autogenerated deepcopy function, copying the receiver, writing into out. in must be non-nil.