package pemfile

import "google.golang.org/grpc/credentials/tls/certprovider/pemfile"

Package pemfile provides a file watching certificate provider plugin implementation which works for files with PEM contents.

Experimental

Notice: All APIs in this package are experimental and may be removed in a later release.

Index

Constants 

const (
	// PluginName is the name of the PEM file watcher plugin.
	PluginName = "file_watcher"
)

Functions

func NewProvider 

func NewProvider(o Options) (certprovider.Provider, error)

NewProvider returns a new certificate provider plugin that is configured to watch the PEM files specified in the passed in options.

Types

type Options 

type Options struct {
	// CertFile is the file that holds the identity certificate.
	// Optional. If this is set, KeyFile must also be set.
	CertFile string
	// KeyFile is the file that holds identity private key.
	// Optional. If this is set, CertFile must also be set.
	KeyFile string
	// RootFile is the file that holds trusted root certificate(s).
	// Optional.
	RootFile string
	// SPIFFEBundleMapFile is the file that holds the spiffe bundle map.
	// If a given provider configures both the RootFile and the
	// SPIFFEBundleMapFile, the SPIFFEBundleMapFile will be preferred.
	// Optional.
	SPIFFEBundleMapFile string
	// RefreshDuration is the amount of time the plugin waits before checking
	// for updates in the specified files.
	// Optional. If not set, a default value (1 hour) will be used.
	RefreshDuration time.Duration
}

Options configures a certificate provider plugin that watches a specified set of files that contain certificates and keys in PEM format.

Source Files

builder.go watcher.go

Version
v1.80.0 (latest)
Published
Apr 1, 2026
Platform
js/wasm
Imports
16 packages
Last checked
4 hours ago –

Tools for package owners.