You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
<td>Generate a self-signed certificate at startup</td>
2800
+
<td><code>false</code></td>
2801
+
<td><code>true</code></td>
2802
+
</tr>
2803
+
<tr>
2804
+
<td><code>TLS_MIN_VERSION</code></td>
2805
+
<td>Minimum accepted TLS version (<code>1.2</code> or <code>1.3</code>)</td>
2806
+
<td><code>1.2</code></td>
2807
+
<td><code>1.3</code></td>
2808
+
</tr>
2794
2809
</tbody>
2795
2810
</table>
2796
-
<p>When both variables are set, the API server listens on HTTPS (port 8443) instead of HTTP (port 8080).</p>
2811
+
<p>When <code>TLS_CERT</code> and <code>TLS_KEY</code>are both set, the API server listens on HTTPS (port 8443) instead of HTTP (port 8080). If <code>TLS_SELF_SIGNED</code> is set to <code>true</code>, a self-signed certificate is generated automatically and explicit cert/key paths are not required. When both cert/key files and <code>TLS_SELF_SIGNED</code> are provided, the cert/key files take precedence.</p>
2797
2812
<h3id="volume-mounts">Volume Mounts</h3>
2798
2813
<p>Certificates should be mounted as a volume from a Kubernetes Secret:</p>
0 commit comments