GetHumanCertDetail is a convenient method for printing compact details of certificate that helps when debugging kube-apiserver usage of certs.

NewDynamicCAContentFromFile returns a CAContentProvider based on a filename that automatically reloads content.

NewDynamicCAFromConfigMapController returns a CAContentProvider based on a configmap that automatically reloads content.

NewDynamicServingCertificateController returns a controller that can be used to keep a TLSConfig up to date.

NewDynamicServingContentFromFiles returns a dynamic CertKeyContentProvider based on a cert and key filename.

NewDynamicSNIContentFromFiles returns a dynamic SNICertKeyContentProvider based on a cert and key filename and explicit names.

NewStaticCAContent returns a CAContentProvider that always returns the same value.

NewStaticCertKeyContent returns a CertKeyContentProvider that always returns the same value.

NewStaticSNICertKeyContent returns a SNICertKeyContentProvider that always returns the same value.

NewUnionCAContentProvider returns a CAContentProvider that is a union of other CAContentProviders.

FileRefreshDuration is exposed so that integration tests can crank up the reload speed.

ConfigMapCAController provies a CAContentProvider that can dynamically react to configmap changes It also fulfills the authenticator interface to provide verifyoptions.

DynamicCertKeyPairContent provides a CertKeyContentProvider that can dynamically react to new file content.

DynamicFileCAContent provides a CAContentProvider that can dynamically react to new file content It also fulfills the authenticator interface to provide verifyoptions.

DynamicFileSNIContent provides a SNICertKeyContentProvider that can dynamically react to new file content.

DynamicServingCertificateController dynamically loads certificates and provides a golang tls compatible dynamic GetCertificate func.

CAContentProvider provides ca bundle byte content.

CertKeyContentProvider provides a certificate and matching private key.

ControllerRunner is a generic interface for starting a controller.

Listener is an interface to use to notify interested parties of a change.

Notifier is a way to add listeners.

SNICertKeyContentProvider provides a certificate and matching private key as well as optional explicit names.