Skip to content

Commit a5bcaad

Browse files
authored
NGINXaaS Load Balancer for Kubernetes configuration update (#755)
NGINXaaS Load Balancer for Kubernetes configuration update to help users enforce TLS settings The added guidance will ensure that users enforce a TLS connection with the dataplane API.
1 parent f648d17 commit a5bcaad

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

content/nginxaas-azure/loadbalancer-kubernetes.md

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -150,7 +150,8 @@ Install the NLK controller using `helm install`. Be sure your kubectl context is
150150
```bash
151151
helm install nlk oci://registry-1.docker.io/nginxcharts/nginxaas-loadbalancer-kubernetes --version 1.1.1 \
152152
--set "nlk.dataplaneApiKey=${keyValue}" \
153-
--set "nlk.config.nginxHosts=${dataplaneAPIEndpoint}nplus"
153+
--set "nlk.config.nginxHosts=${dataplaneAPIEndpoint}nplus" \
154+
--set "nlk.config.tls.mode=ca-tls"
154155
```
155156

156157
##### Install the AKS Extension using the Azure CLI
@@ -173,7 +174,8 @@ az k8s-extension create \
173174
--plan-publisher f5-networks \
174175
--release-namespace nlk \
175176
--config nlk.dataplaneApiKey=${keyValue} \
176-
--config nlk.config.nginxHosts=${dataplaneAPIEndpoint}nplus
177+
--config nlk.config.nginxHosts=${dataplaneAPIEndpoint}nplus \
178+
--config nlk.config.tls.mode=ca-tls
177179
```
178180

179181
##### Install the AKS Extension using the Azure portal
@@ -296,6 +298,7 @@ spec:
296298
| `nlk.config.logLevel` | How verbose should the NLK controller logs be. | Possible values are `debug`, `info`, `warn`, `error`. Default: `info`. |
297299
| `nlk.config.nginxHosts` | The NGINX Plus APIs to send upstream updates to. | Should be set to `{{dataplaneApiEndpoint}}nplus`.|
298300
| `nlk.config.serviceAnnotationMatch` | The value to match on a Service's `nginx.com/nginxaas` annotation. Useful when configuring multiple NLK controllers to update separate NGINXaaS deployemnts. | Default: `nginxaas`. |
301+
| `nlk.config.tls.mode` | The TLS mode to use when forming connections with the data plane API server. | Should be set to `ca-tls` to enforce TLS with the data plane API server.|
299302
| `nlk.dataplaneApiKey` | The NGINXaaS data plane API key that will authorize the controller to talk to your NGINXaaS deployment. | |
300303

301304
### Multiple AKS clusters

0 commit comments

Comments
 (0)