FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

DOC-399: Document Kubernetes endpoint injection by HarshCasper · Pull Request #871 · localstack/localstack-docs · GitHub

/ localstack-docs Public

DOC-399: Document Kubernetes endpoint injection - #871

Open
HarshCasper wants to merge 2 commits into
mainfrom
doc-399-doc-k8s-operator-transparently-inject-localstack-endpoints
ConversationCommits (2)ChecksFiles changed
Open

DOC-399: Document Kubernetes endpoint injection#871
HarshCasper wants to merge 2 commits into
mainfrom
doc-399-doc-k8s-operator-transparently-inject-localstack-endpoints

Conversation

HarshCasper commented Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Member

Summary

  • document opt-in DNS and AWS_ENDPOINT_URL injection for Kubernetes workloads
  • explain fail-open behavior, prerequisites, and the default cluster-domain limitation
  • add webhook certificate management and EKS Auto Mode configuration

DOC-399: Document Kubernetes endpoint injection
e279773 
Explain workload opt-in behavior, certificate management, and EKS Auto Mode so users can configure transparent LocalStack access safely.
HarshCasper requested a review from simonrw August 17, 2026 14:20

cloudflare-workers-and-pages Bot commented Aug 17, 2026 •
edited
Loading

Copy link
Copy Markdown

Deploying localstack-docs with    Cloudflare Pages

Latest commit: 14f91f8
Status: ✅  Deploy successful!
Preview URL: https://2c81a644.localstack-docs.pages.dev
Branch Preview URL: https://doc-399-doc-k8s-operator-tra.localstack-docs.pages.dev

View logs

simonrw approved these changes Aug 17, 2026
View reviewed changes

simonrw left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

Looks really good thanks! Just a couple of minor points

Comment thread src/content/docs/aws/customization/kubernetes/kubernetes-operator.mdx Outdated
Comment thread src/content/docs/aws/customization/kubernetes/kubernetes-operator.mdx Outdated
Comment thread src/content/docs/aws/customization/kubernetes/kubernetes-operator.mdx Outdated
Comment thread src/content/docs/aws/customization/kubernetes/kubernetes-operator.mdx
Comment on lines +329 to +330
The `dnsConfigName` and `dnsConfigNamespace` fields remain required by the `LocalStack` resource schema, but the Operator does not use their values in `eksauto` mode.
Use opt-in [endpoint injection](#inject-localstack-endpoints-into-workloads) to configure workloads that need to access LocalStack.

simonrw Aug 17, 2026

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

We should really update this!

quetzalliwrites Aug 25, 2026

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

What do we update and what should we update it to? :)

DOC-399: Address review feedback on endpoint injection docs
14f91f8 
- Consolidate the dnsPolicy/nameserver/search-domain/ndots bullets
  into one higher-level explanation that also reassures readers
  LocalStack only intercepts domains it owns (localhost.localstack.cloud
  or $LOCALSTACK_HOST) and forwards everything else to the cluster
  DNS resolver as normal.
- Drop the cert-manager SelfSigned-issuer trust-anchor explanation as
  unnecessary cert-manager implementation detail for the operator docs.

quetzalliwrites commented Aug 25, 2026

Copy link
Copy Markdown
Collaborator

Thanks @simonrw — pushed 14f91f81 addressing the DNS-interception reassurance and the ndots/nameserver implementation-detail simplification (consolidated into one bullet, per your suggested wording), and dropped the SelfSigned-issuer trust-anchor explanation as unnecessary cert-manager detail.

Left the EKS Auto Mode comment ("We should really update this!") unaddressed for now — wasn't clear whether that's about the docs wording or the dnsConfigName/dnsConfigNamespace field-requirement behavior itself (the #inject-localstack-endpoints-into-workloads link isn't broken). Happy to follow up once there's more detail on what should change.

This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

simonrw simonrw approved these changes
quetzalliwrites Awaiting requested review from quetzalliwrites quetzalliwrites is a code owner
remotesynth Awaiting requested review from remotesynth remotesynth is a code owner

At least 0 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

Back | FazBrowse Home | New Git URL