16 lines
2.0 KiB
HTML
16 lines
2.0 KiB
HTML
<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>NGINX Ingress Annotation Field Card</title><link rel="stylesheet" href="../assets/course.css"></head><body><main class="page">
|
|
<header class="hero"><p class="eyebrow">CKS field card</p><h1>NGINX annotations</h1><p class="deck">Default prefix: <code>nginx.ingress.kubernetes.io/</code>. Annotation values are strings—quote booleans and numbers.</p></header>
|
|
<section class="card"><h2>High-value recall set</h2><table><thead><tr><th>Intent</th><th>Annotation</th><th>Example value</th></tr></thead><tbody>
|
|
<tr><td>Redirect HTTP when TLS exists</td><td><code>ssl-redirect</code></td><td><code>"true"</code></td></tr>
|
|
<tr><td>Force redirect with external TLS offload</td><td><code>force-ssl-redirect</code></td><td><code>"true"</code></td></tr>
|
|
<tr><td>Encrypt NGINX-to-backend traffic</td><td><code>backend-protocol</code></td><td><code>"HTTPS"</code></td></tr>
|
|
<tr><td>Allow client CIDRs</td><td><code>whitelist-source-range</code></td><td><code>"10.0.0.0/8"</code></td></tr>
|
|
<tr><td>Rewrite matched URI</td><td><code>rewrite-target</code></td><td><code>/$2</code></td></tr>
|
|
<tr><td>Limit request body</td><td><code>proxy-body-size</code></td><td><code>"8m"</code></td></tr>
|
|
<tr><td>Enable regex paths</td><td><code>use-regex</code></td><td><code>"true"</code></td></tr>
|
|
<tr><td>TLS passthrough</td><td><code>ssl-passthrough</code></td><td><code>"true"</code></td></tr>
|
|
</tbody></table>
|
|
<div class="note"><strong>Security caution:</strong> snippet annotations can be critical-risk. TLS passthrough requires controller support and bypasses normal HTTP-layer annotation behavior.</div>
|
|
<p><a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations/">Official annotation reference</a> · <a href="https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/annotations-risk/">Official risk table</a></p></section></main></body></html>
|