tls

Documentation

Index

• func IsCertUsable(cert *tls.Certificate) bool
• type CertificateSecretsProvider
  • func NewCertificateSecretsProvider(controlPlaneClusterName string, certificateStorage *storage.Certificate, ...) *CertificateSecretsProvider
  • func (p *CertificateSecretsProvider) GetCertificateConfig(vhost *route.VirtualHost) *auth.SdsSecretConfig
  • func (p *CertificateSecretsProvider) HasValidCertificate(vhost *route.VirtualHost) bool
  • func (p *CertificateSecretsProvider) Provide(_ context.Context) (secrets []types.Resource, err error)

Functions

func IsCertUsable

func IsCertUsable(cert *tls.Certificate) bool

IsCertUsable is a place where we implement business logic to assure certificates are usable for envoy

Types

type CertificateSecretsProvider

type CertificateSecretsProvider struct {
	// contains filtered or unexported fields
}

func NewCertificateSecretsProvider

func NewCertificateSecretsProvider(controlPlaneClusterName string, certificateStorage *storage.Certificate, log logger.Logger) *CertificateSecretsProvider

func (*CertificateSecretsProvider) GetCertificateConfig

func (p *CertificateSecretsProvider) GetCertificateConfig(vhost *route.VirtualHost) *auth.SdsSecretConfig

GetCertificateConfig will register vhost in the SDS mapping, assuring that the certificate is returned when calling Provide()

func (*CertificateSecretsProvider) HasValidCertificate

func (p *CertificateSecretsProvider) HasValidCertificate(vhost *route.VirtualHost) bool

func (*CertificateSecretsProvider) Provide

func (p *CertificateSecretsProvider) Provide(_ context.Context) (secrets []types.Resource, err error)