transport

Documentation

Overview

Extracted from k8s.io/kubernetes/pkg/kubelet/certificate/transport.go, will be removed when openshift-sdn and the network components move out of the Kubelet. Is intended ONLY to provide certificate rollover until 3.8/3.9.

Index

• func RefreshCertificateAfterExpiry(stopCh <-chan struct{}, period time.Duration, clientConfig *restclient.Config, ...) error

Functions

func RefreshCertificateAfterExpiry

func RefreshCertificateAfterExpiry(stopCh <-chan struct{}, period time.Duration, clientConfig *restclient.Config, store certificate.Store) error

RefreshCertificateAfterExpiry instruments a restconfig with a transport that checks disk to reload expired certificates.

The config must not already provide an explicit transport.

The returned transport periodically checks the manager to determine if the certificate has changed. If it has, the transport shuts down all existing client connections, forcing the client to re-handshake with the server and use the new certificate.

stopCh should be used to indicate when the transport is unused and doesn't need to continue checking the manager.