19d92e9ad2
* Proxy: Map Kubernetes Pod Namespace/Name to TLS identity. Map the Kubernetes identity into a DNS name that can be used to validate the peer's certificate. The final mapping is TBD; the important thing for now is that the mapped name doesn't collide with any real DNS name. Encapsulate the mapping logic within the TLS submodule. Minimize `Arc`ing and `Clone`ing of TLS identities. This has no effect in default configurations since the settings that enable the functionality are not set by default. Signed-off-by: Brian Smith <brian@briansmith.org> |
||
|---|---|---|
| .. | ||
| cert_resolver.rs | ||
| config.rs | ||
| connection.rs | ||
| dns_name.rs | ||
| identity.rs | ||
| mod.rs | ||