mirror of https://github.com/k3s-io/k3s
49 lines
1.3 KiB
Go
49 lines
1.3 KiB
Go
package clientaccess
|
|
|
|
import (
|
|
"os"
|
|
|
|
"github.com/pkg/errors"
|
|
"k8s.io/client-go/tools/clientcmd"
|
|
clientcmdapi "k8s.io/client-go/tools/clientcmd/api"
|
|
)
|
|
|
|
// WriteClientKubeConfig generates a kubeconfig at destFile that can be used to connect to a server at url with the given certs and keys
|
|
func WriteClientKubeConfig(destFile, url, serverCAFile, clientCertFile, clientKeyFile string) error {
|
|
serverCA, err := os.ReadFile(serverCAFile)
|
|
if err != nil {
|
|
return errors.Wrapf(err, "failed to read %s", serverCAFile)
|
|
}
|
|
|
|
clientCert, err := os.ReadFile(clientCertFile)
|
|
if err != nil {
|
|
return errors.Wrapf(err, "failed to read %s", clientCertFile)
|
|
}
|
|
|
|
clientKey, err := os.ReadFile(clientKeyFile)
|
|
if err != nil {
|
|
return errors.Wrapf(err, "failed to read %s", clientKeyFile)
|
|
}
|
|
|
|
config := clientcmdapi.NewConfig()
|
|
|
|
cluster := clientcmdapi.NewCluster()
|
|
cluster.CertificateAuthorityData = serverCA
|
|
cluster.Server = url
|
|
|
|
authInfo := clientcmdapi.NewAuthInfo()
|
|
authInfo.ClientCertificateData = clientCert
|
|
authInfo.ClientKeyData = clientKey
|
|
|
|
context := clientcmdapi.NewContext()
|
|
context.AuthInfo = "default"
|
|
context.Cluster = "default"
|
|
|
|
config.Clusters["default"] = cluster
|
|
config.AuthInfos["default"] = authInfo
|
|
config.Contexts["default"] = context
|
|
config.CurrentContext = "default"
|
|
|
|
return clientcmd.WriteToFile(*config, destFile)
|
|
}
|