config

Documentation

Index

• Variables
• type Config
  • func GetConfig(client kubernetes.Interface) (*Config, error)
  • func (gc *Config) Apply() error
  • func (gc *Config) ShouldSkipTLSForAuthority(candidateAuthority string) bool

Variables

var (
	Scheme = scheme.Scheme
)

Types

type Config

type Config struct {
	// contains filtered or unexported fields
}

Config is populated from the cluster's Secret or ConfigMap and sets behavior of kapp-controller. NOTE because config may be populated from a Secret use caution if you're tempted to serialize.

func GetConfig

func GetConfig(client kubernetes.Interface) (*Config, error)

GetConfig populates the Config struct from k8s resources. GetConfig prefers a secret named kcConfigName but if that does not exist falls back to a configMap of same name.

func (*Config) Apply

func (gc *Config) Apply() error

func (*Config) ShouldSkipTLSForAuthority

func (gc *Config) ShouldSkipTLSForAuthority(candidateAuthority string) bool

ShouldSkipTLSForAuthority compares a candidate host or host:port against a stored set of allow-listed authorities. the allow-list is built from the user-facing flag `dangerousSkipTLSVerify`. Note that in some cases the allow-list may contain ports, so the function name could also be ShouldSkipTLSForDomainAndPort Note that "authority" is defined in: https://www.rfc-editor.org/rfc/rfc3986#section-3 to mean "host and port"