parametierise cert paths via command-line flags

Author: malingatembo

cmd/main.go

@@ -65,6 +65,9 @@ func main() {
 	var probeAddr string
 	var secureMetrics bool
 	var enableHTTP2 bool
+	var certDir string
+	var certName string
+	var keyName string
 	var tlsOpts []func(*tls.Config)
 	flag.StringVar(&metricsAddr, "metrics-bind-address", "0", "The address the metrics endpoint binds to. "+
 		"Use :8443 for HTTPS or :8080 for HTTP, or leave as 0 to disable the metrics service.")
@@ -76,6 +79,12 @@ func main() {
 		"If set, the metrics endpoint is served securely via HTTPS. Use --metrics-secure=false to use HTTP instead.")
 	flag.BoolVar(&enableHTTP2, "enable-http2", false,
 		"If set, HTTP/2 will be enabled for the metrics and webhook servers")
+	flag.StringVar(&certDir, "cert-dir", "/tmp/k8s-metrics-server/serving-certs",
+		"The directory where the TLS certificates are stored.")
+	flag.StringVar(&certName, "cert-name", "tls.crt",
+		"The name of the TLS certificate file.")
+	flag.StringVar(&keyName, "key-name", "tls.key",
+		"The name of the TLS key file.")
 	opts := zap.Options{
 		Development: true,
 	}
@@ -110,11 +119,11 @@ func main() {
 	metricsServerOptions := metricsserver.Options{
 		BindAddress:   metricsAddr,
 		SecureServing: secureMetrics,
-		// Use certificates from service-ca mounted at /tmp/k8s-metrics-server/serving-certs
+		// Use certificates from service-ca mounted via flags (defaults to /tmp/k8s-metrics-server/serving-certs)
 		TLSOpts:  tlsOpts,
-		CertDir:  "/tmp/k8s-metrics-server/serving-certs",
-		CertName: "tls.crt",
-		KeyName:  "tls.key",
+		CertDir:  certDir,
+		CertName: certName,
+		KeyName:  keyName,
 	}
 
 	if secureMetrics {