Skip to content

Commit 918c1bc

Browse files
adding for docs for insecureEdgeTerminatePolicy in reencrypt and
passthrough routes
1 parent a863c80 commit 918c1bc

File tree

1 file changed

+11
-0
lines changed

1 file changed

+11
-0
lines changed

architecture/core_concepts/routes.adoc

+11
Original file line numberDiff line numberDiff line change
@@ -640,6 +640,12 @@ The destination pod is responsible for serving certificates for the
640640
traffic at the endpoint. This is currently the only method that can support
641641
requiring client certificates (also known as two-way authentication).
642642

643+
[NOTE]
644+
====
645+
passthrough routes can also have an `insecureEdgeTerminationPolicy` the only valid values are
646+
`None` or empty (for disabled) or `Redirect`.
647+
====
648+
643649
[[re-encryption-termination]]
644650
*Re-encryption Termination*
645651

@@ -683,6 +689,11 @@ validate the endpoint certificate, securing the connection from the router to
683689
the destination. This field is required, but only for re-encryption.
684690
====
685691

692+
[NOTE]
693+
====
694+
Reencrypt routes can have an insecureEdgeTerminationPolicy with all of the same values as for edge-terminated routes.
695+
====
696+
686697

687698
[[router-sharding]]
688699
== Router Sharding

0 commit comments

Comments
 (0)