You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/deploy/configurations.md
+23-22Lines changed: 23 additions & 22 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -176,25 +176,26 @@ If running on EC2, the default values are obtained from the instance metadata se
176
176
### Feature Gates
177
177
There are a set of key=value pairs that describe AWS load balancer controller features. You can use it as flags `--feature-gates=key1=value1,key2=value2`
178
178
179
-
|Features-gate Supported Key | Type | Default Value | Description |
| ListenerRulesTagging | string | true | Enable or disable tagging AWS load balancer listeners and rules |
182
-
| WeightedTargetGroups | string | true | Enable or disable weighted target groups |
183
-
| ServiceTypeLoadBalancerOnly | string | false | If enabled, controller will be limited to reconciling service of type `LoadBalancer` |
184
-
| EndpointsFailOpen | string | true | Enable or disable allowing endpoints with `ready:unknown` state in the target groups. |
185
-
| EnableServiceController | string | true | Toggles support for `Service` type resources. |
186
-
| EnableIPTargetType | string | true | Used to toggle support for target-type `ip` across `Ingress` and `Service` type resources. |
187
-
| EnableRGTAPI | string | false | If enabled, the tagging manager will describe resource tags via RGT APIs, otherwise via ELB APIs. In order to enable RGT API, `tag:GetResources` is needed in controller IAM policy. |
188
-
| SubnetsClusterTagCheck | string | true | Enable or disable the check for `kubernetes.io/cluster/${cluster-name}` during subnet auto-discovery |
189
-
| NLBHealthCheckAdvancedConfiguration | string | true | Enable or disable advanced health check configuration for NLB, for example health check timeout |
190
-
| ALBSingleSubnet | string | false | If enabled, controller will allow using only 1 subnet for provisioning ALB, which need to get whitelisted by ELB in advance |
191
-
| NLBSecurityGroup | string | true | Enable or disable all NLB security groups actions including frontend sg creation, backend sg creation, and backend sg modifications. This same behavior is able to be applied to an individual service by using the annotation `aws-load-balancer-disable-nlb-sg` |
192
-
| LBCapacityReservation | string | true | Enable or disable the capacity reservation feature on ALB and NLB |
193
-
| EnableTCPUDPListenerType | string | false | Enable or disable creation of TCP_UDP type listeners. This value can be overriden at the Service level by the annotation `service.beta.kubernetes.io/aws-load-balancer-enable-tcp-udp-listener` |
194
-
| GlobalAcceleratorController | string | false | Enable the Global Accelerator controller for managing AWS Global Accelerator resources through Kubernetes CRDs |
195
-
| EnhancedDefaultBehavior | string | false | Enable this feature to allow the controller to remove Provisioned Capacity or mTLS settings by removing the corresponding annotation. |
196
-
| EnableDefaultTagsLowPriority | string | false | If enabled, tags supplied via `--default-tags` will be overridden by tags specified in other manners, like via annotations. |
197
-
| SubnetDiscoveryByReachability | string | true | Enable or disable subnet discovery by reachability |
198
-
| NLBGatewayAPI | string | true | Enable or disable the NLB Gateway API support |
199
-
| ALBGatewayAPI | string | true | Enable or disable the ALB Gateway API support |
200
-
| ALBTargetControlAgent | string | false | Enable or disable the ALB Target Control Agent |
179
+
| Features-gate Supported Key | Type | Default Value | Description |
| ListenerRulesTagging | string | true | Enable or disable tagging AWS load balancer listeners and rules |
182
+
| WeightedTargetGroups | string | true | Enable or disable weighted target groups |
183
+
| ServiceTypeLoadBalancerOnly | string | false | If enabled, controller will be limited to reconciling service of type `LoadBalancer` |
184
+
| EndpointsFailOpen | string | true | Enable or disable allowing endpoints with `ready:unknown` state in the target groups. |
185
+
| EnableServiceController | string | true | Toggles support for `Service` type resources. |
186
+
| EnableIPTargetType | string | true | Used to toggle support for target-type `ip` across `Ingress` and `Service` type resources. |
187
+
| EnableRGTAPI | string | false | If enabled, the tagging manager will describe resource tags via RGT APIs, otherwise via ELB APIs. In order to enable RGT API, `tag:GetResources` is needed in controller IAM policy. |
188
+
| SubnetsClusterTagCheck | string | true | Enable or disable the check for `kubernetes.io/cluster/${cluster-name}` during subnet auto-discovery |
189
+
| NLBHealthCheckAdvancedConfiguration | string | true | Enable or disable advanced health check configuration for NLB, for example health check timeout |
190
+
| ALBSingleSubnet | string | false | If enabled, controller will allow using only 1 subnet for provisioning ALB, which need to get whitelisted by ELB in advance |
191
+
| NLBSecurityGroup | string | true | Enable or disable all NLB security groups actions including frontend sg creation, backend sg creation, and backend sg modifications. This same behavior is able to be applied to an individual service by using the annotation `aws-load-balancer-disable-nlb-sg` |
192
+
| LBCapacityReservation | string | true | Enable or disable the capacity reservation feature on ALB and NLB |
193
+
| EnableTCPUDPListenerType | string | false | Enable or disable creation of TCP_UDP type listeners. This value can be overriden at the Service level by the annotation `service.beta.kubernetes.io/aws-load-balancer-enable-tcp-udp-listener` |
194
+
| GlobalAcceleratorController | string | false | Enable the Global Accelerator controller for managing AWS Global Accelerator resources through Kubernetes CRDs |
195
+
| EnhancedDefaultBehavior | string | false | Enable this feature to allow the controller to remove Provisioned Capacity or mTLS settings by removing the corresponding annotation. |
196
+
| EnableDefaultTagsLowPriority | string | false | If enabled, tags supplied via `--default-tags` will be overridden by tags specified in other manners, like via annotations. |
197
+
| SubnetDiscoveryByReachability | string | true | Enable or disable subnet discovery by reachability |
198
+
| NLBGatewayAPI | string | true | Enable or disable the NLB Gateway API support |
199
+
| ALBGatewayAPI | string | true | Enable or disable the ALB Gateway API support |
200
+
| GatewayListenerSet | string | true | Enable or disable the usage of ListenerSets in the Gateway API |
201
+
| ALBTargetControlAgent | string | false | Enable or disable the ALB Target Control Agent |
0 commit comments