Skip to content

Commit 27d500d

Browse files
authored
Merge pull request #3244 from JacobTanenbaum/InsecureEdgeTermination
adding for docs for insecureEdgeTerminatePolicy in reencrypt and passthrough routes
2 parents 12c68fd + 918c1bc commit 27d500d

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

architecture/core_concepts/routes.adoc

+11
Original file line numberDiff line numberDiff line change
@@ -682,6 +682,12 @@ The destination pod is responsible for serving certificates for the
682682
traffic at the endpoint. This is currently the only method that can support
683683
requiring client certificates (also known as two-way authentication).
684684

685+
[NOTE]
686+
====
687+
passthrough routes can also have an `insecureEdgeTerminationPolicy` the only valid values are
688+
`None` or empty (for disabled) or `Redirect`.
689+
====
690+
685691
[[re-encryption-termination]]
686692
*Re-encryption Termination*
687693

@@ -725,6 +731,11 @@ validate the endpoint certificate, securing the connection from the router to
725731
the destination. This field is required, but only for re-encryption.
726732
====
727733

734+
[NOTE]
735+
====
736+
Reencrypt routes can have an insecureEdgeTerminationPolicy with all of the same values as for edge-terminated routes.
737+
====
738+
728739

729740
[[router-sharding]]
730741
== Router Sharding

0 commit comments

Comments
 (0)