AWS eks documentation change
Summary
Updated proxy configuration examples by replacing placeholder syntax with concrete values and fixed markdown formatting issues.
Security assessment
Changes involve syntax cleanup and placeholder replacement in proxy configuration examples. No evidence of security vulnerability fixes or new security features. Proxy configuration is operational, not security-specific.
Diff
diff --git a/eks/latest/userguide/hybrid-nodes-proxy.md b/eks/latest/userguide/hybrid-nodes-proxy.md index de910141b..bc0625144 100644 --- a//eks/latest/userguide/hybrid-nodes-proxy.md +++ b//eks/latest/userguide/hybrid-nodes-proxy.md @@ -37,2 +37,2 @@ Create a file on each hybrid node called `http-proxy.conf` in the `/etc/systemd/ - Environment="HTTP_PROXY=http://<replaceable>proxy-domain:port</replaceable>" - Environment="HTTPS_PROXY=http://<replaceable>proxy-domain:port</replaceable>" + Environment="HTTP_PROXY=http://proxy-domain:port" + Environment="HTTPS_PROXY=http://proxy-domain:port" @@ -48,2 +48,2 @@ The `containerd.service.d` directory will need to be created for this file. You - echo 'Environment="HTTP_PROXY=http://<replaceable>proxy-domain:port</replaceable>"' >> /etc/systemd/system/containerd.service.d/http-proxy.conf - echo 'Environment="HTTPS_PROXY=http://<replaceable>proxy-domain:port</replaceable>"' >> /etc/systemd/system/containerd.service.d/http-proxy.conf + echo 'Environment="HTTP_PROXY=http://proxy-domain:port"' >> /etc/systemd/system/containerd.service.d/http-proxy.conf + echo 'Environment="HTTPS_PROXY=http://proxy-domain:port"' >> /etc/systemd/system/containerd.service.d/http-proxy.conf @@ -62,2 +62,2 @@ Create a file on each hybrid node called `http-proxy.conf` in the `/etc/systemd/ - Environment="HTTP_PROXY=http://<replaceable>proxy-domain:port</replaceable>" - Environment="HTTPS_PROXY=http://<replaceable>proxy-domain:port</replaceable>" + Environment="HTTP_PROXY=http://proxy-domain:port" + Environment="HTTPS_PROXY=http://proxy-domain:port" @@ -73,2 +73,2 @@ The `kubelet.service.d` directory must be created for this file. You will need t - echo 'Environment="HTTP_PROXY=http://<replaceable>proxy-domain:port</replaceable>"' >> /etc/systemd/system/kubelet.service.d/http-proxy.conf - echo 'Environment="HTTPS_PROXY=http://<replaceable>proxy-domain:port</replaceable>"' >> /etc/systemd/system/kubelet.service.d/http-proxy.conf + echo 'Environment="HTTP_PROXY=http://proxy-domain:port"' >> /etc/systemd/system/kubelet.service.d/http-proxy.conf + echo 'Environment="HTTPS_PROXY=http://proxy-domain:port"' >> /etc/systemd/system/kubelet.service.d/http-proxy.conf @@ -96,2 +96,2 @@ Populate the file with the following contents. Replace `proxy-domain` and `port` - Environment="HTTP_PROXY=http://<replaceable>proxy-domain:port</replaceable>" - Environment="HTTPS_PROXY=http://<replaceable>proxy-domain:port</replaceable>" + Environment="HTTP_PROXY=http://proxy-domain:port" + Environment="HTTPS_PROXY=http://proxy-domain:port" @@ -121 +121 @@ Replace the systemd service name in the restart command below depending on the o - mkdir -p <replaceable>systemd-service-file-directory + mkdir -p systemd-service-file-directory @@ -123,2 +123,2 @@ Replace the systemd service name in the restart command below depending on the o - echo 'Environment="HTTP_PROXY=http://[.replaceable]#proxy-domain:port</replaceable>"' >> <replaceable>systemd-service-file-directory/http-proxy.conf - echo 'Environment="HTTPS_PROXY=http://[.replaceable]#proxy-domain:port</replaceable>"' >> [.replaceable]#systemd-service-file-directory/http-proxy.conf + echo 'Environment="HTTP_PROXY=http://[.replaceable]#proxy-domain:port"' >> systemd-service-file-directory/http-proxy.conf + echo 'Environment="HTTPS_PROXY=http://[.replaceable]#proxy-domain:port"' >> [.replaceable]#systemd-service-file-directory/http-proxy.conf @@ -137,2 +137,3 @@ If you are using a proxy for internet access, you must configure your operating - sudo snap set system proxy.https=http://<replaceable>proxy-domain:port</replaceable> - sudo snap set system proxy.http=http://<replaceable>proxy-domain:port</replaceable> + sudo snap set system proxy.https=http://proxy-domain:port + sudo snap set system proxy.http=http://proxy-domain:port + @@ -142,2 +143,2 @@ If you are using a proxy for internet access, you must configure your operating - Acquire::http::Proxy "http://<replaceable>proxy-domain:port</replaceable>"; - Acquire::https::Proxy "http://<replaceable>proxy-domain:port</replaceable>"; + Acquire::http::Proxy "http://proxy-domain:port"; + Acquire::https::Proxy "http://proxy-domain:port"; @@ -152 +153,2 @@ If you are using a proxy for internet access, you must configure your operating - proxy=http://<replaceable>proxy-domain:port</replaceable> + proxy=http://proxy-domain:port + @@ -161 +163,2 @@ If you are using a proxy for internet access, you must configure your operating - proxy=http://<replaceable>proxy-domain:port</replaceable> + proxy=http://proxy-domain:port + @@ -174,2 +177,2 @@ Create a file called `http-proxy.conf` in the `/etc/systemd/system/aws_signing_h - Environment="HTTP_PROXY=http://<replaceable>proxy-domain:port</replaceable>" - Environment="HTTPS_PROXY=http://<replaceable>proxy-domain:port</replaceable>" + Environment="HTTP_PROXY=http://proxy-domain:port" + Environment="HTTPS_PROXY=http://proxy-domain:port" @@ -201 +204 @@ This will open the `kube-proxy` DaemonSet definition on your configured editor. - value: http://<replaceable>proxy-domain:port</replaceable> + value: http://proxy-domain:port @@ -203 +206 @@ This will open the `kube-proxy` DaemonSet definition on your configured editor. - value: http://<replaceable>proxy-domain:port</replaceable> + value: http://proxy-domain:port