From 35ff40533448368dc1c0de8259aea5754ba5df36 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Martin=20Andr=C3=A9?= Date: Tue, 9 Jan 2024 04:27:10 +0100 Subject: [PATCH] [occm] Update docs for default-tls-container-ref (#2517) Since eeba48501bf743e3992093bd806a513ad103a347, occm now accepts barbican secrets (https:///v1/secrets/) in addition to container ref (https:///v1/containers/) for the `default-tls-container-ref` option. This commit updates the doc to reflect the change. --- .../using-openstack-cloud-controller-manager.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/openstack-cloud-controller-manager/using-openstack-cloud-controller-manager.md b/docs/openstack-cloud-controller-manager/using-openstack-cloud-controller-manager.md index 5e4603e5ab..996b86ce68 100644 --- a/docs/openstack-cloud-controller-manager/using-openstack-cloud-controller-manager.md +++ b/docs/openstack-cloud-controller-manager/using-openstack-cloud-controller-manager.md @@ -281,9 +281,9 @@ Although the openstack-cloud-controller-manager was initially implemented with N This option is currently a workaround for the issue https://github.com/kubernetes/ingress-nginx/issues/3996, should be removed or refactored after the Kubernetes [KEP-1860](https://github.com/kubernetes/enhancements/tree/master/keps/sig-network/1860-kube-proxy-IP-node-binding) is implemented. * `default-tls-container-ref` - Reference to a tls container. This option works with Octavia, when this option is set then the cloud provider will create an Octavia Listener of type TERMINATED_HTTPS for a TLS Terminated loadbalancer. + Reference to a tls container or secret. This option works with Octavia, when this option is set then the cloud provider will create an Octavia Listener of type TERMINATED_HTTPS for a TLS Terminated loadbalancer. - Format for tls container ref: `https://{keymanager_host}/v1/containers/{uuid}` + Accepted format for tls container ref are `https://{keymanager_host}/v1/containers/{uuid}` and `https://{keymanager_host}/v1/secrets/{uuid}`. Check `container-store` parameter if you want to disable validation. * `container-store`