Skip to content

Commit a95e471

Browse files
authored
Doc updates for mTLS feature and minor documentation bugs (#3547)
* Doc updates for mTLS feature and minor documentation bugs * Addressing comment
1 parent 4feff25 commit a95e471

File tree

5 files changed

+94
-57
lines changed

5 files changed

+94
-57
lines changed

docs/deploy/configurations.md

+13-12
Original file line numberDiff line numberDiff line change
@@ -161,15 +161,16 @@ If running on EC2, the default values are obtained from the instance metadata se
161161
### Feature Gates
162162
They are a set of kye=value pairs that describe AWS load balance controller features. You can use it as flags `--feature-gates=key1=value1,key2=value2`
163163
164-
|Features-gate Supported Key | Type | Default Value | Description |
165-
|---------------------------------------|---------------------------------|-----------------|-------------|
166-
| ListenerRulesTagging | string | true | Enable or disable tagging AWS load balancer listeners and rules |
167-
| WeightedTargetGroups | string | true | Enable or disable weighted target groups |
168-
| ServiceTypeLoadBalancerOnly | string | false | If enabled, controller will be limited to reconciling service of type `LoadBalancer`|
169-
| EndpointsFailOpen | string | true | Enable or disable allowing endpoints with `ready:unknown` state in the target groups. |
170-
| EnableServiceController | string | true | Toggles support for `Service` type resources. |
171-
| EnableIPTargetType | string | true | Used to toggle support for target-type `ip` across `Ingress` and `Service` type resources. |
172-
| EnableRGTAPI | string | false | If enabled, the tagging manager will describe resource tags via RGT APIs, otherwise via ELB APIs. In order to enable RGT API, `tag:GetResources` is needed in controller IAM policy. |
173-
| SubnetsClusterTagCheck | string | true | Enable or disable the check for `kubernetes.io/cluster/${cluster-name}` during subnet auto-discovery |
174-
| NLBHealthCheckAdvancedConfiguration | string | true | Enable or disable advanced health check configuration for NLB, for example health check timeout |
175-
| ALBSingleSubnet | string | false | If enabled, controller will allow using only 1 subnet for provisioning ALB, which need to get whitelisted by ELB in advance |
164+
|Features-gate Supported Key | Type | Default Value | Description |
165+
|---------------------------------------|---------------------------------|---------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
166+
| ListenerRulesTagging | string | true | Enable or disable tagging AWS load balancer listeners and rules |
167+
| WeightedTargetGroups | string | true | Enable or disable weighted target groups |
168+
| ServiceTypeLoadBalancerOnly | string | false | If enabled, controller will be limited to reconciling service of type `LoadBalancer` |
169+
| EndpointsFailOpen | string | true | Enable or disable allowing endpoints with `ready:unknown` state in the target groups. |
170+
| EnableServiceController | string | true | Toggles support for `Service` type resources. |
171+
| EnableIPTargetType | string | true | Used to toggle support for target-type `ip` across `Ingress` and `Service` type resources. |
172+
| EnableRGTAPI | string | false | If enabled, the tagging manager will describe resource tags via RGT APIs, otherwise via ELB APIs. In order to enable RGT API, `tag:GetResources` is needed in controller IAM policy. |
173+
| SubnetsClusterTagCheck | string | true | Enable or disable the check for `kubernetes.io/cluster/${cluster-name}` during subnet auto-discovery |
174+
| NLBHealthCheckAdvancedConfiguration | string | true | Enable or disable advanced health check configuration for NLB, for example health check timeout |
175+
| ALBSingleSubnet | string | false | If enabled, controller will allow using only 1 subnet for provisioning ALB, which need to get whitelisted by ELB in advance |
176+
| NLBSecurityGroup | string | true | Enable or disable all NLB security groups actions including frontend sg creation, backend sg creation, and backend sg modifications |

docs/deploy/installation.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -203,7 +203,7 @@ We recommend using the Helm chart to install the controller. The chart supports
203203
### Install `cert-manager`
204204
205205
```
206-
kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.5.4/cert-manager.yaml
206+
kubectl apply --validate=false -f https://github.com/jetstack/cert-manager/releases/download/v1.12.3/cert-manager.yaml
207207
```
208208
209209
### Apply YAML

0 commit comments

Comments
 (0)