cc9ae23a0c
- Add a unit test for each cert controller - Make DynamicTLSServingCertProvider an interface and use a mutex internally - Create a shared ToPEM function instead of having two very similar functions - Move the ObservableWithInformerOption test helper to testutils - Rename some variables and imports
45 lines
964 B
Go
45 lines
964 B
Go
/*
|
|
Copyright 2020 VMware, Inc.
|
|
SPDX-License-Identifier: Apache-2.0
|
|
*/
|
|
|
|
package provider
|
|
|
|
import (
|
|
"sync"
|
|
|
|
"k8s.io/apiserver/pkg/server/dynamiccertificates"
|
|
)
|
|
|
|
type DynamicTLSServingCertProvider interface {
|
|
dynamiccertificates.CertKeyContentProvider
|
|
Set(certPEM, keyPEM []byte)
|
|
}
|
|
|
|
type dynamicTLSServingCertProvider struct {
|
|
certPEM []byte
|
|
keyPEM []byte
|
|
mutex sync.RWMutex
|
|
}
|
|
|
|
func NewDynamicTLSServingCertProvider() DynamicTLSServingCertProvider {
|
|
return &dynamicTLSServingCertProvider{}
|
|
}
|
|
|
|
func (p *dynamicTLSServingCertProvider) Set(certPEM, keyPEM []byte) {
|
|
p.mutex.Lock() // acquire a write lock
|
|
defer p.mutex.Unlock()
|
|
p.certPEM = certPEM
|
|
p.keyPEM = keyPEM
|
|
}
|
|
|
|
func (p *dynamicTLSServingCertProvider) Name() string {
|
|
return "DynamicTLSServingCertProvider"
|
|
}
|
|
|
|
func (p *dynamicTLSServingCertProvider) CurrentCertKeyContent() (cert []byte, key []byte) {
|
|
p.mutex.RLock() // acquire a read lock
|
|
defer p.mutex.RUnlock()
|
|
return p.certPEM, p.keyPEM
|
|
}
|