Skip to content

Commit

Permalink
feat: allow configuring min tls for grpc
Browse files Browse the repository at this point in the history
Supporting kedacore/keda#6320

Signed-off-by: Or Shachar <[email protected]>
  • Loading branch information
or-shachar authored Nov 11, 2024
1 parent 73f6a14 commit 3161f87
Showing 1 changed file with 10 additions and 0 deletions.
10 changes: 10 additions & 0 deletions content/docs/2.17/operate/cluster.md
Original file line number Diff line number Diff line change
Expand Up @@ -130,6 +130,16 @@ The gRPC Metrics Service is part of the KEDA Operator deployment and serves scal
| metrics-service-address | keda-operator.keda.svc.cluster.local:9666 | The address of the gRPC Metrics Service Server |
| metrics-service-grpc-authority | "" | Host Authority override for the Metrics Service if the Host Authority is not the same as the address used for the gRPC Metrics Service Server. This is required for mutual TLS when the identity of the adapter server as presented in its TLS certificate is not the same as the metrics-service-address |

By default, KEDA uses TLS1.3 as a minimum TLS version for GRPC client/server. However, if you need to support another version you can configure it by using the environment variable `KEDA_HTTP_MIN_TLS_VERSION`.

For example:

```yaml
- env:
KEDA_GRPC_MIN_TLS_VERSION: TLS12
```


## Configure `MaxConcurrentReconciles` for Controllers

To implement internal controllers KEDA uses the [controller-runtime project](https://github.com/kubernetes-sigs/controller-runtime), that enables configuration of [MaxConcurrentReconciles property](https://pkg.go.dev/sigs.k8s.io/controller-runtime/pkg/controller#Options), ie. the maximum number of concurrent reconciles which can be run for a controller.
Expand Down

0 comments on commit 3161f87

Please sign in to comment.