From ea921f3818549da7008d711d628b2eea3390b95a Mon Sep 17 00:00:00 2001 From: Sarah Alsmiller Date: Fri, 5 Aug 2022 10:36:07 -0500 Subject: [PATCH] bulleted list --- website/content/docs/api-gateway/configuration/gateway.mdx | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/website/content/docs/api-gateway/configuration/gateway.mdx b/website/content/docs/api-gateway/configuration/gateway.mdx index 2b15f0b5eb..63a94b922e 100644 --- a/website/content/docs/api-gateway/configuration/gateway.mdx +++ b/website/content/docs/api-gateway/configuration/gateway.mdx @@ -158,7 +158,12 @@ Specifies the `tls` configurations for the `Gateway`. The `tls` object is requir | --- | --- | --- | --- | | `certificateRefs` |
Specifies Kubernetes `name` and `namespace` objects that contains TLS certificates and private keys.
The certificates establish a TLS handshake for requests that match the `hostname` of the associated `listener`. Each reference must be a Kubernetes Secret. If you are using a Secret in a namespace other than the `Gateway`'s, each reference must also have a corresponding [`ReferencePolicy`](https://gateway-api.sigs.k8s.io/v1alpha2/references/spec/#gateway.networking.k8s.io/v1alpha2.ReferencePolicy).
| Object or array | Required if `tls` is set | | `mode` | Specifies the TLS Mode. Should always be set to `Terminate` for `HTTPRoutes` | string | Required if `certificateRefs` is set | -| `options` | Specifies additional Consul API Gateway options. The following keys are available `api-gateway.consul.hashicorp.com/tls_min_version`, `api-gateway.consul.hashicorp.com/tls_max_version`, `api-gateway.consul.hashicorp.com/tls_cipher_suites`| Map of strings | optional | +| `options` | Specifies additional Consul API Gateway options. | Map of strings | optional | + +The following keys for `options` are available +* `api-gateway.consul.hashicorp.com/tls_min_version` +* `api-gateway.consul.hashicorp.com/tls_max_version` +* `api-gateway.consul.hashicorp.com/tls_cipher_suites` In the following example, `tls` settings are configured to use a secret named `consul-server-cert` in the same namespace as the `Gateway` and the minimum tls version is set to `TLSv1_2`.