ingress notes for tls

OWASP · Sep 28, 2022 · 9e8e6ab · 9e8e6ab
1 parent ea269c0
commit 9e8e6ab
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/aws/k8s/secret-challenge-vault-ingress.yml b/aws/k8s/secret-challenge-vault-ingress.yml
@@ -6,6 +6,10 @@ metadata:
   annotations:
     alb.ingress.kubernetes.io/scheme: internet-facing
     alb.ingress.kubernetes.io/target-type: instance
+    #uncomment and configure below if you want to use tls, don't forget to override the cookie to a secure value!
+    # alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:<region>:<account>:certificate/xxxxxx
+    # alb.ingress.kubernetes.io/listen-ports: '[{"HTTP": 80}, {"HTTPS":443}]'
+    # alb.ingress.kubernetes.io/actions.ssl-redirect: '443'
 spec:
   ingressClassName: alb
   rules: