oauth2-proxy/pkg/requests
Niki Dokovski c77efe2300
feat(requests): add dynamic CA certificate reloading
Add DynamicCALoader and DynamicTLSTransport for hot-reloadable CA
certificates without requiring application restart.

- DynamicCALoader: watches CA files via fsnotify and reloads on change,
  supports Kubernetes ConfigMap/Secret symlink replacement pattern
- DynamicTLSTransport: wraps http.Transport with dynamic CA verification
  using VerifyPeerCertificate callback
- Add atomic transport proxy to http.go for runtime transport swapping

Signed-off-by: Niki Dokovski <nickytd@gmail.com>
2026-02-27 15:54:56 +01:00
..
util Merge commit from fork 2025-07-30 19:46:58 +02:00
builder.go feat: Replace default Go user-agent with oauth2-proxy and version (#2570) 2024-07-14 21:09:17 +01:00
builder_test.go chore(deps): Updated to ginkgo v2 (#2459) 2024-07-18 22:41:02 +02:00
dynamic_ca.go feat(requests): add dynamic CA certificate reloading 2026-02-27 15:54:56 +01:00
dynamic_ca_test.go feat(requests): add dynamic CA certificate reloading 2026-02-27 15:54:56 +01:00
dynamic_transport.go feat(requests): add dynamic CA certificate reloading 2026-02-27 15:54:56 +01:00
http.go feat(requests): add dynamic CA certificate reloading 2026-02-27 15:54:56 +01:00
requests_suite_test.go chore(deps): Updated to ginkgo v2 (#2459) 2024-07-18 22:41:02 +02:00
result.go Fix Linting Errors (#1835) 2022-10-21 11:57:51 +01:00
result_test.go use official upstream yaml library v3 2025-11-16 22:38:22 +01:00