Struct TlsOptions 

pub struct TlsOptions<'a> {
    cert_path: Option<&'a str>,
    system_roots: bool,
    domain: Option<&'a str>,
}

The TLS settings of a worker or CLI, as given on the command line.

Fields

cert_path: Option<&'a str>

Path to the trust anchor to verify the orchestrator against (--tls)

system_roots: bool

Verify against the host’s system trust store (--tls_system) (if true)

domain: Option<&'a str>

The name to verify the orchestrator as, overriding the address (--tls_domain)

Implementations

impl<'a> TlsOptions<'a>

pub fn from_args(args: &'a ArgMatches) -> Self

Read the TLS settings from the parsed command-line arguments of a worker or CLI.

pub fn is_enabled(&self) -> bool

Whether the connection to the orchestrator is secured with TLS.

pub fn client_config( &self, address: &str, ) -> Result<ClientTlsConfig, Box<dyn Error>>

Build the client-side TLS configuration used by workers and the CLI.

Arguments

• address - the orchestrator address (-a), whose host names the orchestrator

Returns

A tonic [ClientTlsConfig] holding the trust anchors and the name to authenticate.

Errors

If the certificate file cannot be read or holds no PEM certificate.