forked from kubernetes-sigs/aws-iam-authenticator
/
config.go
74 lines (61 loc) · 2.17 KB
/
config.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
/*
Copyright 2017 by the contributors.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package config
import (
"fmt"
"path/filepath"
"github.com/sirupsen/logrus"
)
func (c *Config) ListenURL() string {
return fmt.Sprintf("https://%s/authenticate", c.ListenAddr())
}
func (c *Config) ListenAddr() string {
// we always listen on localhost (and run with host networking)
return fmt.Sprintf("127.0.0.1:%d", c.LocalhostPort)
}
func (c *Config) GenerateFiles() error {
// load or generate a certificate+private key
_, err := c.GetOrCreateCertificate()
if err != nil {
return fmt.Errorf("could not load/generate a certificate")
}
err = c.CreateKubeconfig()
if err != nil {
return fmt.Errorf("could not generate a webhook kubeconfig")
}
return nil
}
func (c *Config) CreateKubeconfig() error {
cert, err := c.LoadExistingCertificate()
if err != nil {
return fmt.Errorf("failed to load an existing certificate: %v", err)
}
// write a kubeconfig suitable for the API server to call us
logrus.WithField("kubeconfigPath", c.GenerateKubeconfigPath).Info("writing webhook kubeconfig file")
err = kubeconfigParams{
ServerURL: c.ListenURL(),
CertificateAuthorityBase64: certToPEMBase64(cert.Certificate[0]),
}.writeTo(c.GenerateKubeconfigPath)
if err != nil {
logrus.WithField("kubeconfigPath", c.GenerateKubeconfigPath).WithError(err).Fatal("could not write kubeconfig")
}
return nil
}
// CertPath returns the path to the pem file containing the certificate
func (c *Config) CertPath() string {
return filepath.Join(c.StateDir, "cert.pem")
}
// KeyPath returns the path to the pem file containing the private key
func (c *Config) KeyPath() string {
return filepath.Join(c.StateDir, "key.pem")
}