certs
packageThis package is not in the latest version of its module.
Details
Validgo.mod file
The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license
Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version
Modules with tagged versions give importers more predictable builds.
Stable version
When a project reaches major version v1 it is considered stable.
- Learn more about best practices
Repository
Links
Documentation¶
Overview¶
Package certs implements logic to help multiple Kubernetes replicas share TLScerts for a common Tailscale Service.
Index¶
Constants¶
This section is empty.
Variables¶
This section is empty.
Functions¶
This section is empty.
Types¶
typeCertManager¶
type CertManager struct {// contains filtered or unexported fields}CertManager is responsible for issuing certificates for known domains and formaintaining a loop that re-attempts issuance daily.Currently cert manager logic is only run on ingress ProxyGroup replicas that are responsible for managing certs forHA Ingress HTTPS endpoints ('write' replicas).
funcNewCertManager¶
func NewCertManager(lclocalclient.LocalClient, logflogger.Logf) *CertManager
func (*CertManager)EnsureCertLoops¶
func (cm *CertManager) EnsureCertLoops(ctxcontext.Context, sc *ipn.ServeConfig)error
EnsureCertLoops ensures that, for all currently managed Service HTTPSendpoints, there is a cert loop responsible for issuing and ensuring therenewal of the TLS certs.ServeConfig must not be nil.