in pkg/cert/store.go [49:73]
func (s *secretCertStore) Current() (*tls.Certificate, error) {
secret, err := s.clientset.CoreV1().Secrets(s.namespace).Get(
context.TODO(),
s.secretName,
metav1.GetOptions{},
)
noKeyErr := certificate.NoCertKeyError(
fmt.Sprintf("no cert/key files read at secret %s/%s",
s.namespace,
s.secretName))
if err != nil {
klog.Errorf("Error fetching secret: %v", err.Error())
return nil, &noKeyErr
}
klog.Infof("Fetched secret: %s/%s", s.namespace, s.secretName)
keyBytes, ok := secret.Data[v1.TLSPrivateKeyKey]
if !ok {
return nil, &noKeyErr
}
certBytes, ok := secret.Data[v1.TLSCertKey]
if !ok {
return nil, &noKeyErr
}
return loadX509KeyPairData(certBytes, keyBytes)
}