Documentation ¶
Overview ¶
Extracted from k8s.io/kubernetes/pkg/kubelet/certificate/transport.go, will be removed when openshift-sdn and the network components move out of the Kubelet. Is intended ONLY to provide certificate rollover until 3.8/3.9.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func RefreshCertificateAfterExpiry ¶
func RefreshCertificateAfterExpiry(stopCh <-chan struct{}, period time.Duration, clientConfig *restclient.Config, store certificate.Store) error
RefreshCertificateAfterExpiry instruments a restconfig with a transport that checks disk to reload expired certificates.
The config must not already provide an explicit transport.
The returned transport periodically checks the manager to determine if the certificate has changed. If it has, the transport shuts down all existing client connections, forcing the client to re-handshake with the server and use the new certificate.
stopCh should be used to indicate when the transport is unused and doesn't need to continue checking the manager.
Types ¶
This section is empty.