mirror of
https://git.vectorsigma.ru/public/k3s.git
synced 2026-08-03 20:49:41 +00:00
3cb6c2dc92
We are not making use of the stack traces that these functions capture, so we should avoid using them as unnecessary overhead.
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
(cherry picked from commit bed1f66880)
Signed-off-by: Brad Davidson <brad.davidson@rancher.com>
49 lines
1.4 KiB
Go
49 lines
1.4 KiB
Go
package clientaccess
|
|
|
|
import (
|
|
"os"
|
|
|
|
pkgerrors "github.com/pkg/errors"
|
|
"k8s.io/client-go/tools/clientcmd"
|
|
clientcmdapi "k8s.io/client-go/tools/clientcmd/api"
|
|
)
|
|
|
|
// WriteClientKubeConfig generates a kubeconfig at destFile that can be used to connect to a server at url with the given certs and keys
|
|
func WriteClientKubeConfig(destFile, url, serverCAFile, clientCertFile, clientKeyFile string) error {
|
|
serverCA, err := os.ReadFile(serverCAFile)
|
|
if err != nil {
|
|
return pkgerrors.WithMessagef(err, "failed to read %s", serverCAFile)
|
|
}
|
|
|
|
clientCert, err := os.ReadFile(clientCertFile)
|
|
if err != nil {
|
|
return pkgerrors.WithMessagef(err, "failed to read %s", clientCertFile)
|
|
}
|
|
|
|
clientKey, err := os.ReadFile(clientKeyFile)
|
|
if err != nil {
|
|
return pkgerrors.WithMessagef(err, "failed to read %s", clientKeyFile)
|
|
}
|
|
|
|
config := clientcmdapi.NewConfig()
|
|
|
|
cluster := clientcmdapi.NewCluster()
|
|
cluster.CertificateAuthorityData = serverCA
|
|
cluster.Server = url
|
|
|
|
authInfo := clientcmdapi.NewAuthInfo()
|
|
authInfo.ClientCertificateData = clientCert
|
|
authInfo.ClientKeyData = clientKey
|
|
|
|
context := clientcmdapi.NewContext()
|
|
context.AuthInfo = "default"
|
|
context.Cluster = "default"
|
|
|
|
config.Clusters["default"] = cluster
|
|
config.AuthInfos["default"] = authInfo
|
|
config.Contexts["default"] = context
|
|
config.CurrentContext = "default"
|
|
|
|
return clientcmd.WriteToFile(*config, destFile)
|
|
}
|