cert

Documentation

Index

• type CertManager
  • func NewCertManager() *CertManager
  • func (cm *CertManager) Close()
  • func (cm *CertManager) ClusterTLS() *tls.Config
  • func (cm *CertManager) Init(cfg *config.Config, logger *zap.Logger, cfgch <-chan *config.Config) error
  • func (cm *CertManager) PeerTLS() *tls.Config
  • func (cm *CertManager) SQLTLS() *tls.Config
  • func (cm *CertManager) ServerTLS() *tls.Config
  • func (cm *CertManager) SetRetryInterval(interval time.Duration)

Types

type CertManager

type CertManager struct {
	// contains filtered or unexported fields
}

CertManager reloads certs and offers interfaces for fetching TLS configs. Currently, all the namespaces share the same certs but there might be per-namespace certs in the future.

func NewCertManager

func NewCertManager() *CertManager

NewCertManager creates a new CertManager.

func (*CertManager) Close

func (cm *CertManager) Close()

func (*CertManager) ClusterTLS

func (cm *CertManager) ClusterTLS() *tls.Config

func (*CertManager) Init

func (cm *CertManager) Init(cfg *config.Config, logger *zap.Logger, cfgch <-chan *config.Config) error

Init creates a CertManager and reloads certificates periodically. cfgch can be set to nil for the serverless tier because it has no config manager.

func (*CertManager) PeerTLS

func (cm *CertManager) PeerTLS() *tls.Config

func (*CertManager) SQLTLS

func (cm *CertManager) SQLTLS() *tls.Config

func (*CertManager) ServerTLS

func (cm *CertManager) ServerTLS() *tls.Config

func (*CertManager) SetRetryInterval

func (cm *CertManager) SetRetryInterval(interval time.Duration)