From 38cad21448f258a5db7c9c82398d6553b41ff282 Mon Sep 17 00:00:00 2001 From: Anish Ramasekar Date: Tue, 30 Jan 2018 23:31:33 -0600 Subject: [PATCH] Add documentation --- docs/user-guide/annotations.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/docs/user-guide/annotations.md b/docs/user-guide/annotations.md index f6b686f1d8..3dcbbc1713 100644 --- a/docs/user-guide/annotations.md +++ b/docs/user-guide/annotations.md @@ -59,6 +59,7 @@ The following annotations are supported: |[nginx.ingress.kubernetes.io/upstream-vhost](#custom-nginx-upstream-vhost)|string| |[nginx.ingress.kubernetes.io/whitelist-source-range](#whitelist-source-range)|CIDR| |[nginx.ingress.kubernetes.io/proxy-buffering](#proxy-buffering)|string| +|[nginx.ingress.kubernetes.io/ssl-ciphers](#ssl-ciphers)|string| **Note:** all the values must be a string. In case of booleans or number it must be quoted. @@ -419,3 +420,13 @@ To use custom values in an Ingress rule define these annotation: ```yaml nginx.ingress.kubernetes.io/proxy-buffering: "on" ``` + +### SSL ciphers + +Specifies the [enabled ciphers](http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_ciphers). + +Using this annotation will set the `ssl_ciphers` directive at the server level. This configuration is active for all the paths in the host. + +```yaml +nginx.ingress.kubernetes.io/ssl-ciphers: "ALL:!aNULL:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP" +```