Skip to content

Commit

Permalink
docs(mesh): update ECS env variables (#7698)
Browse files Browse the repository at this point in the history
  • Loading branch information
michaelbeaumont authored Jul 29, 2024
1 parent bbdd6fb commit 8716c92
Showing 1 changed file with 14 additions and 0 deletions.
14 changes: 14 additions & 0 deletions app/_src/mesh/installation/ecs.md
Original file line number Diff line number Diff line change
Expand Up @@ -195,6 +195,19 @@ must be restricted accordingly for your AWS account
The control plane must have the following options enabled. The example
Cloudformation [sets them via environment variables](https://github.com/Kong/kong-mesh-ecs/blob/main/deploy/controlplane.yaml#L334-L337):

{% if_version gte:2.7.x %}
```yaml
- Name: KUMA_DP_SERVER_AUTHN_DP_PROXY_TYPE
Value: aws-iam
- Name: KUMA_DP_SERVER_AUTHN_ZONE_PROXY_TYPE
Value: aws-iam
- Name: KUMA_DP_SERVER_AUTHN_ENABLE_RELOADABLE_TOKENS
Value: "true"
- Name: KMESH_AWSIAM_AUTHORIZEDACCOUNTIDS
Value: !Ref AWS::AccountId # this tells the CP which accounts can be used by DPs to authenticate
```
{% endif_version %}
{% if_version lte:2.6.x %}
```yaml
- Name: KUMA_DP_SERVER_AUTH_TYPE
Value: aws-iam
Expand All @@ -203,6 +216,7 @@ Cloudformation [sets them via environment variables](https://github.com/Kong/kon
- Name: KMESH_AWSIAM_AUTHORIZEDACCOUNTIDS
Value: !Ref AWS::AccountId # this tells the CP which accounts can be used by DPs to authenticate
```
{% endif_version %}
Every sidecar must have the [`--auth-type=aws` flag set as well](https://github.com/Kong/kong-mesh-ecs/blob/main/deploy/counter-demo/demo-app.yaml#L255).

Expand Down

0 comments on commit 8716c92

Please sign in to comment.