func (o CreateNodeConfigOptions) MakeClientCert(clientCertFile, clientKeyFile string) error {
if o.IsCreateClientCertificate() {
createNodeClientCert := CreateClientCertOptions{
SignerCertOptions: o.SignerCertOptions,
CertFile: clientCertFile,
KeyFile: clientKeyFile,
User: "******" + o.NodeName,
Groups: util.StringList([]string{bootstrappolicy.NodesGroup}),
Output: o.Output,
}
if err := createNodeClientCert.Validate(nil); err != nil {
return err
}
if _, err := createNodeClientCert.CreateClientCert(); err != nil {
return err
}
} else {
if err := CopyFile(o.ClientCertFile, clientCertFile, 0644); err != nil {
return err
}
if err := CopyFile(o.ClientKeyFile, clientKeyFile, 0600); err != nil {
return err
}
}
return nil
}
// ensureCORSAllowedOrigins takes a string list of origins and attempts to covert them to CORS origin
// regexes, or exits if it cannot.
func (c *MasterConfig) ensureCORSAllowedOrigins() []*regexp.Regexp {
if len(c.Options.CORSAllowedOrigins) == 0 {
return []*regexp.Regexp{}
}
allowedOriginRegexps, err := util.CompileRegexps(util.StringList(c.Options.CORSAllowedOrigins))
if err != nil {
glog.Fatalf("Invalid --cors-allowed-origins: %v", err)
}
return allowedOriginRegexps
}
func TestSecretTypeDiscovered(t *testing.T) {
options := CreateSecretOptions{
Name: "any",
Sources: util.StringList([]string{"./bsFixtures/leadingdot/.dockercfg"}),
Stderr: ioutil.Discard,
}
secret, err := options.BundleSecret()
if err != nil {
t.Errorf("unexpected error: %v", err)
}
if secret.Type != kapi.SecretTypeDockercfg {
t.Errorf("expected %v, got %v", kapi.SecretTypeDockercfg, secret.Type)
}
}
func (o CreateMasterCertsOptions) createClientCert(clientCertInfo ClientCertInfo, getSignerCertOptions *GetSignerCertOptions) error {
clientCertOptions := CreateClientCertOptions{
GetSignerCertOptions: getSignerCertOptions,
CertFile: clientCertInfo.CertLocation.CertFile,
KeyFile: clientCertInfo.CertLocation.KeyFile,
User: clientCertInfo.User,
Groups: util.StringList(clientCertInfo.Groups.List()),
Overwrite: o.Overwrite,
Output: o.Output,
}
if _, err := clientCertOptions.CreateClientCert(); err != nil {
return err
}
return nil
}