mirror of
https://github.com/k3s-io/kubernetes.git
synced 2025-08-06 10:43:56 +00:00
Build TLS client for kubelet correctly
This commit is contained in:
parent
fbd4722094
commit
888fe4b175
@ -60,7 +60,9 @@ type HTTPKubeletClient struct {
|
|||||||
|
|
||||||
func NewKubeletClient(config *KubeletConfig) (KubeletClient, error) {
|
func NewKubeletClient(config *KubeletConfig) (KubeletClient, error) {
|
||||||
transport := http.DefaultTransport
|
transport := http.DefaultTransport
|
||||||
if config.CertFile != "" {
|
hasCA := len(config.CAFile) > 0 || len(config.CAData) > 0
|
||||||
|
hasCert := len(config.CertFile) > 0 || len(config.CertData) > 0
|
||||||
|
if hasCert {
|
||||||
var (
|
var (
|
||||||
certData, keyData, caData []byte
|
certData, keyData, caData []byte
|
||||||
err error
|
err error
|
||||||
@ -77,7 +79,7 @@ func NewKubeletClient(config *KubeletConfig) (KubeletClient, error) {
|
|||||||
if transport, err = NewClientCertTLSTransport(certData, keyData, caData); err != nil {
|
if transport, err = NewClientCertTLSTransport(certData, keyData, caData); err != nil {
|
||||||
return nil, err
|
return nil, err
|
||||||
}
|
}
|
||||||
} else if config.CAFile != "" {
|
} else if hasCA {
|
||||||
var (
|
var (
|
||||||
caData []byte
|
caData []byte
|
||||||
err error
|
err error
|
||||||
|
Loading…
Reference in New Issue
Block a user