tls user guide --default-ssl-certificate clarification

Evidently the `--default-ssl-certificate` option is used not only for the catch-all server, but also for all ingress `tls:` sections that don't have a `secretName` option. This doesn't seem to be documented anywhere, hence this change.
This commit is contained in:
Olaf Klischat 2019-09-23 12:35:10 +02:00 committed by GitHub
parent 5d84c1f2f9
commit 24bb6c1d36

View file

@ -34,6 +34,9 @@ If this flag is not provided NGINX will use a self-signed certificate.
For instance, if you have a TLS secret `foo-tls` in the `default` namespace,
add `--default-ssl-certificate=default/foo-tls` in the `nginx-controller` deployment.
The default certificate will also be used for ingress `tls:` sections that do not
have a `secretName` option.
## SSL Passthrough
The [`--enable-ssl-passthrough`](cli-arguments/) flag enables the SSL Passthrough feature, which is disabled by