mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-09-07 12:11:43 +00:00
Use CAFile even if client certificate is not specified
This commit is contained in:
@@ -60,12 +60,18 @@ type HTTPKubeletClient struct {
|
||||
|
||||
func NewKubeletClient(config *KubeletConfig) (KubeletClient, error) {
|
||||
transport := http.DefaultTransport
|
||||
if config.CAFile != "" {
|
||||
if config.CertFile != "" {
|
||||
t, err := NewClientCertTLSTransport(config.CertFile, config.KeyFile, config.CAFile)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
transport = t
|
||||
} else if config.CAFile != "" {
|
||||
t, err := NewTLSTransport(config.CAFile)
|
||||
if err != nil {
|
||||
return nil, err
|
||||
}
|
||||
transport = t
|
||||
}
|
||||
|
||||
c := &http.Client{Transport: transport}
|
||||
|
Reference in New Issue
Block a user