aws-samples/end-to-end-encryption-on-amazon-eks

Set up end-to-end encryption for applications on Amazon EKS using cert-manager and Let's Encrypt

The repository is referenced in Amazon prescriptive-guidance link shared below where we walk through the architecture and deployment procedure. We urge viewers to go through the link.

https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/set-up-end-to-end-encryption-for-applications-on-amazon-eks-using-cert-manager-and-let-s-encrypt.html

Security

See CONTRIBUTING for more information.

License

This library is licensed under the MIT-0 License. See the LICENSE file.

end-to-end-encryption-on-amazon-eks's Issues

nginxReloadTimeout is set to 0 causing immediate failure

When this value is set to "0", the ingress controller will fail immediately instead of waiting for NGINX+ to reload the configuration.

A comment in the code states that "Default is 4000 (default is 20000 instead if enable-app-protect is true). If set to 0, default values will be used."

According to the helm documentation this isn't true -> https://docs.nginx.com/nginx-ingress-controller/installation/installation-with-helm/

Further sources: https://my.f5.com/manage/s/article/K000091316