Skip to content

Commit b26ae26

Browse files
authored
Update internal_tls.md
1 parent a45aba0 commit b26ae26

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

docs/advanced/internal_tls.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
1-
### Overview
1+
# Internal TLS
22

33
By default, internal communication between pods within the cluster is not encrypted, as SSL operations can be computationally expensive. Typically, SSL termination occurs at the client-facing load balancer. However, certain security policies may require SSL encryption for all internal communications. While service mesh proxies often handle this requirement, there are cases where encryption must be enforced at the pod level.
44

55
> [!WARNING]
66
> Enabling internal TLS increases resource consumption, as additional computational power is required for SSL operations.
77
8-
### Enabling Internal TLS
8+
### Enable Internal TLS
99

1010
To activate internal TLS, set the `enabled` flag to `true`:
1111

@@ -15,7 +15,7 @@ general:
1515
enabled: true
1616
```
1717
18-
### Providing TLS Certificates
18+
### Provide TLS Certificates
1919
2020
There are two ways to supply certificates to pods:
2121
@@ -47,7 +47,7 @@ This prevents secrets from being recreated during `helm upgrade` operations.
4747

4848
If you prefer to use externally generated certificates, specify the Kubernetes secret names containing them. Each secret must include the `tls.crt` and `tls.key` keys.
4949

50-
example of a secret:
50+
Example of a secret:
5151

5252
```yaml
5353
apiVersion: v1

0 commit comments

Comments
 (0)