Skip to content

Commit

Permalink
docs: fix code display on exposed using hostname subdomain page
Browse files Browse the repository at this point in the history
  • Loading branch information
mloiseleur committed Mar 3, 2025
1 parent 90ae7db commit db0eaba
Showing 1 changed file with 2 additions and 2 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ For such setup, you can switch the DNS resolution mode to [Hostname/Subdomain](h

- Create a `Headless service` named `tf-runner` in each allowed namespace

```yaml hl_lines="4-5,8-10"
```yaml hl_lines="4-5 8-10"
apiVersion: v1
kind: Service
metadata:
Expand Down Expand Up @@ -103,4 +103,4 @@ The Runner's pod can then be targeted by TF-Controller using `<terraform_object_

The switch is performed by setting the following _Helm value_ `usePodSubdomainResolution: true` or running directly TF-controller with the option `--use-pod-subdomain-resolution=true`

IMPORTANT: The gRPC communication between TF-Controller and Runner's pod is secured with mTLS. TF-controller generates a valid wildcard TLS certificate for `*.<namespace>.pod.<cluster-domain>` and `*.tf-runner.<namespace>.svc.<cluster-domain>` hosts on the Runner's namespace. The Runner's pod present this certificate during TLS handshake with TF-Controller.
IMPORTANT: The gRPC communication between TF-Controller and Runner's pod is secured with mTLS. TF-controller generates a valid wildcard TLS certificate for `*.<namespace>.pod.<cluster-domain>` and `*.tf-runner.<namespace>.svc.<cluster-domain>` hosts on the Runner's namespace. The Runner's pod present this certificate during TLS handshake with TF-Controller.

0 comments on commit db0eaba

Please sign in to comment.