options

Documentation

Index

• func DynamicTLSSourceEnabled(o WebhookOptions) bool
• func FileTLSSourceEnabled(o WebhookOptions) bool
• type WebhookOptions
  • func (o *WebhookOptions) AddFlags(fs *pflag.FlagSet)

Functions

func DynamicTLSSourceEnabled

func DynamicTLSSourceEnabled(o WebhookOptions) bool

func FileTLSSourceEnabled

func FileTLSSourceEnabled(o WebhookOptions) bool

Types

type WebhookOptions

type WebhookOptions struct {
	ListenPort  int
	HealthzPort int

	// Path to TLS certificate and private key on disk.
	// Both must be specified if either is.
	// May not be specified if DynamicServingCASecretNamespace and
	// DynamicServingCASecretName are set.
	TLSCertFile string
	TLSKeyFile  string

	// Namespace and name of the Secret resource containing the TLS certificate
	// used as a CA to sign dynamic serving certificates.
	// Both must be specified if either is.
	// May not be specified if TLSCertFile and TLSKeyFile are set.
	DynamicServingCASecretNamespace string
	DynamicServingCASecretName      string
	// List of DNSNames that must be present on serving certificates.
	DynamicServingDNSNames []string

	// Optional path to the kubeconfig used to connect to the apiserver when
	// using the 'dynamic serving' certificate sources.
	// If not specified, in cluster config will be used.
	Kubeconfig    string
	APIServerHost string

	// TLSCipherSuites is the list of allowed cipher suites for the server.
	// Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
	TLSCipherSuites []string

	// MinTLSVersion is the minimum TLS version supported.
	// Values are from tls package constants (https://golang.org/pkg/crypto/tls/#pkg-constants).
	MinTLSVersion string
}

func (*WebhookOptions) AddFlags

func (o *WebhookOptions) AddFlags(fs *pflag.FlagSet)