kubernetes/staging/src/k8s.io/client-go/transport/cert_rotation.go

const workItemKey …

var CertCallbackRefreshDuration …

type reloadFunc …

type dynamicClientCert …

func certRotatingDialer(reload reloadFunc, dial utilnet.DialFunc) *dynamicClientCert { … }

// loadClientCert calls the callback and rotates connections if needed
func (c *dynamicClientCert) loadClientCert() (*tls.Certificate, error) { … }

// certsEqual compares tls Certificates, ignoring the Leaf which may get filled in dynamically
func certsEqual(left, right *tls.Certificate) bool { … }

func byteMatrixEqual(left, right [][]byte) bool { … }

// run starts the controller and blocks until stopCh is closed.
func (c *dynamicClientCert) Run(stopCh <-chan struct{ … }

func (c *dynamicClientCert) runWorker() { … }

func (c *dynamicClientCert) processNextWorkItem() bool { … }

func (c *dynamicClientCert) GetClientCertificate(*tls.CertificateRequestInfo) (*tls.Certificate, error) { … }