var FileRefreshDuration … type ControllerRunner … type DynamicFileCAContent … var _ … var _ … var _ … type caBundleAndVerifier … // NewDynamicCAContentFromFile returns a CAContentProvider based on a filename that automatically reloads content func NewDynamicCAContentFromFile(purpose, filename string) (*DynamicFileCAContent, error) { … } // AddListener adds a listener to be notified when the CA content changes. func (c *DynamicFileCAContent) AddListener(listener Listener) { … } // loadCABundle determines the next set of content for the file. func (c *DynamicFileCAContent) loadCABundle() error { … } // hasCAChanged returns true if the caBundle is different than the current. func (c *DynamicFileCAContent) hasCAChanged(caBundle []byte) bool { … } // RunOnce runs a single sync loop func (c *DynamicFileCAContent) RunOnce(ctx context.Context) error { … } // Run starts the controller and blocks until stopCh is closed. func (c *DynamicFileCAContent) Run(ctx context.Context, workers int) { … } func (c *DynamicFileCAContent) watchCAFile(stopCh <-chan struct{ … } // handleWatchEvent triggers reloading the CA file, and restarts a new watch if it's a Remove or Rename event. func (c *DynamicFileCAContent) handleWatchEvent(e fsnotify.Event, w *fsnotify.Watcher) error { … } func (c *DynamicFileCAContent) runWorker() { … } func (c *DynamicFileCAContent) processNextWorkItem() bool { … } // Name is just an identifier func (c *DynamicFileCAContent) Name() string { … } // CurrentCABundleContent provides ca bundle byte content func (c *DynamicFileCAContent) CurrentCABundleContent() (cabundle []byte) { … } // VerifyOptions provides verifyoptions compatible with authenticators func (c *DynamicFileCAContent) VerifyOptions() (x509.VerifyOptions, bool) { … } // newVerifyOptions creates a new verification func from a file. It reads the content and then fails. // It will return a nil function if you pass an empty CA file. func newCABundleAndVerifier(name string, caBundle []byte) (*caBundleAndVerifier, error) { … } // defaultVerifyOptions returns VerifyOptions that use the system root certificates, current time, // and requires certificates to be valid for client auth (x509.ExtKeyUsageClientAuth) func defaultVerifyOptions() x509.VerifyOptions { … }
Codebase Browser
kubernetes