package x509metrics

import "k8s.io/apiserver/pkg/util/x509metrics"

Index ¶

• func NewMissingSANRoundTripperWrapperConstructor(metricCounter *metrics.Counter) func(rt http.RoundTripper) http.RoundTripper

Functions ¶

func NewMissingSANRoundTripperWrapperConstructor ¶

func NewMissingSANRoundTripperWrapperConstructor(metricCounter *metrics.Counter) func(rt http.RoundTripper) http.RoundTripper

NewMissingSANRoundTripperWrapperConstructor returns a RoundTripper wrapper that's usable within ClientConfig.Wrap that increases the `metricCounter` whenever:

1. we get a x509.HostnameError with string `x509: certificate relies on legacy Common Name field` which indicates an error caused by the deprecation of Common Name field when veryfing remote hostname
2. the server certificate in response contains no SAN. This indicates that this binary run with the GODEBUG=x509ignoreCN=0 in env

Source Files ¶

missing_san.go