Add DynamicCALoader and DynamicTLSTransport for hot-reloadable CA
certificates without requiring application restart.
- DynamicCALoader: watches CA files via fsnotify and reloads on change,
supports Kubernetes ConfigMap/Secret symlink replacement pattern
- DynamicTLSTransport: wraps http.Transport with dynamic CA verification
using VerifyPeerCertificate callback
- Add atomic transport proxy to http.go for runtime transport swapping
Signed-off-by: Niki Dokovski <nickytd@gmail.com>
* feat: Replace default Go user-agent with oauth2-proxy and version
* Add to CHANGELOG
* Make userAgentTransport configurable and composable
* Use correct naming convention for DefaultHTTPClient
* Move version to own package and use named arguments
* Update version path in Makefile
* Fix import path in Makefile
* Change importpath in dist.sh
* Minor style issues
Niki Dokovski
tuunit
Jacob Middag