mirror of
https://github.com/cirruslabs/orchard.git
synced 2026-10-18 13:21:00 +02:00
Fedor Korotkov
cdf5c5eb00
* Simplified bootstrapping of a cluster Introduced a new convention about a pre-defined `bootstrap-admin` account for `orchard controller run`. Providing `ORCHARD_BOOTSTRAP_ADMIN_TOKEN` will auto-create such user for easier configuration. `bootstrap-admin` can be used for creating other service accounts on the first run and after that can be disposed. Also change `orchard worker run` to expect controller URL as the only parameter and a bootstrap token passed via an argument instead of using a context that might not be created. * Missing error check
37 lines
823 B
Go
37 lines
823 B
Go
package client
|
|
|
|
import (
|
|
"crypto/tls"
|
|
"crypto/x509"
|
|
"github.com/cirruslabs/orchard/internal/netconstants"
|
|
)
|
|
|
|
type Option func(*Client)
|
|
|
|
func WithAddress(address string) Option {
|
|
return func(client *Client) {
|
|
client.address = address
|
|
}
|
|
}
|
|
|
|
func WithTrustedCertificate(cert *x509.Certificate) Option {
|
|
return func(client *Client) {
|
|
// Check that the API is accessible
|
|
privatePool := x509.NewCertPool()
|
|
privatePool.AddCert(cert)
|
|
|
|
client.tlsConfig = &tls.Config{
|
|
MinVersion: tls.VersionTLS13,
|
|
RootCAs: privatePool,
|
|
ServerName: netconstants.DefaultControllerServerName,
|
|
}
|
|
}
|
|
}
|
|
|
|
func WithCredentials(serviceAccountName string, serviceAccountToken string) Option {
|
|
return func(client *Client) {
|
|
client.serviceAccountName = serviceAccountName
|
|
client.serviceAccountToken = serviceAccountToken
|
|
}
|
|
}
|