kubernetes · mtulio · Jul 7, 2025
diff --git a/docs/service_controller.md b/docs/service_controller.md
@@ -17,19 +17,19 @@ The service controller is responsible for watch for service and node object chan
 | service.beta.kubernetes.io/aws-load-balancer-cross-zone-load-balancing-enabled | [true\|false]                       | -   | ELB | With cross-zone load balancing, each load balancer node for your Classic Load Balancer distributes requests evenly across the registered instances in all enabled Availability Zones. If cross-zone load balancing is disabled, each load balancer node distributes requests evenly across the registered instances in its Availability Zone only. |
 | service.beta.kubernetes.io/aws-load-balancer-extra-security-groups             | Comma-separated list                | -   | ELB | Specifies additional security groups to be added to ELB.    |
 | service.beta.kubernetes.io/aws-load-balancer-security-groups                   | Comma-separated list                | -   | ELB | Specifies the security groups to be added to ELB. Differently from the annotation "service.beta.kubernetes.io/aws-load-balancer-extra-security-groups", this replaces all other security groups previously assigned to the ELB. |
-| service.beta.kubernetes.io/aws-load-balancer-healthcheck-healthy-threshold     | [2-10]                              | -   | NLB | Specifies the number of successive successful health checks required for a backend to be considered healthy for traffic. For NLB, healthy-threshold and unhealthy-threshold must be equal. |
-| service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval              | [5-300]                             | 30  | NLB | Specifies, in seconds, the interval between health checks. |
-| service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeout               | [2-60]                              | 5   | NLB | The amount of time to wait when receiving a response from the health check, in seconds. |
-| service.beta.kubernetes.io/aws-load-balancer-healthcheck-unhealthy-threshold   | [2-10]                              | 2   | NLB | The number of consecutive failed health checks that must occur before declaring an EC2 instance unhealthy. |
+| service.beta.kubernetes.io/aws-load-balancer-healthcheck-healthy-threshold     | [2-10]                              | -   | ELB,NLB | Specifies the number of successive successful health checks required for a backend to be considered healthy for traffic. For NLB, healthy-threshold and unhealthy-threshold must be equal. |
+| service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval              | [5-300]                             | 30  | ELB,NLB | Specifies, in seconds, the interval between health checks. |
+| service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeout               | [2-60]                              | 5   | ELB,NLB | The amount of time to wait when receiving a response from the health check, in seconds. |
+| service.beta.kubernetes.io/aws-load-balancer-healthcheck-unhealthy-threshold   | [2-10]                              | 2   | ELB,NLB | The number of consecutive failed health checks that must occur before declaring an EC2 instance unhealthy. |
 | service.beta.kubernetes.io/aws-load-balancer-internal                          | [true\|false]                       | -   | ELB,NLB | Indicates that the load balancer should be internal. |
 | service.beta.kubernetes.io/aws-load-balancer-proxy-protocol                    | [*]                                 | -   | ELB | Enables the proxy protocol on an ELB. Right now we only accept the value "*" which means enable the proxy protocol on all ELB backends. In the future we could adjust this to allow setting the proxy protocol only on certain backends. |
 | service.beta.kubernetes.io/aws-load-balancer-ssl-cert                          | IAM or ACM ARN                      | -   | ELB,NLB | Requests a secure listener. Value is a valid certificate ARN. For more, see the [elb listener config guide](http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/elb-listener-config.html).  CertARN is an IAM or CM certificate ARN. |
 | service.beta.kubernetes.io/aws-load-balancer-ssl-negotiation-policy            | -                                   | ELBSecurityPolicy-2016-08 | ELB,NLB | Specifies SSL negotiation settings for the HTTPS/SSL listeners of your load balancer. Defaults to the default ELB policy. |
 | service.beta.kubernetes.io/aws-load-balancer-ssl-ports                         | Comma-separated list                | *   | ELB,NLB | Specifies a comma-separated list of ports that will use SSL/HTTPS listeners. Defaults to all. |
 | service.beta.kubernetes.io/aws-load-balancer-type                              | [nlb]                               | -   | ELB,NLB | Indicates the type of Load Balancer. The only valid value is nlb.  Leaving this field blank is equivalent to selecting ELB. |
 | service.beta.kubernetes.io/aws-load-balancer-eip-allocations                   | Comma-separated list                | -   | NLB | List of EIP allocations to associate with a internet-facing load balancer. Only valid for NLB. |
-| service.beta.kubernetes.io/aws-load-balancer-healthcheck-path                  | -                                   | /   | NLB | Specifies the http path for the health check in case of http/https protocol. |
-| service.beta.kubernetes.io/aws-load-balancer-healthcheck-port                  | [traffic-port\|1-65535]             | traffic-port | NLB | Specifies the TCP target port for the target group health check. |
-| service.beta.kubernetes.io/aws-load-balancer-healthcheck-protocol              | [tcp\|http\|https]                  | tcp | NLB | Specifies the protocol to use for the target group health check. |
+| service.beta.kubernetes.io/aws-load-balancer-healthcheck-path                  | -                                   | /   | ELB,NLB | Specifies the http path for the health check in case of http/https protocol. |
+| service.beta.kubernetes.io/aws-load-balancer-healthcheck-port                  | [traffic-port|1-65535]             | traffic-port | ELB,NLB | Specifies the TCP target port for the target group health check. |
+| service.beta.kubernetes.io/aws-load-balancer-healthcheck-protocol              | ELB*:[TCP\|HTTP\|HTTPS], NLB:[tcp\|http\|https] | ELB*:TCP, NLB:tcp | ELB,NLB | Specifies the protocol to use for the target group health check. *ELB config is case sensitive while [1182 is fixed](https://github.com/kubernetes/cloud-provider-aws/pull/1182) |
 | service.beta.kubernetes.io/aws-load-balancer-subnets                           | Comma-separated list                | -   | ELB,NLB | Specifies the Availability Zone configuration for the load balancer. The values are comma separated list of subnetID or subnetName from different AZs. |
 | service.beta.kubernetes.io/aws-load-balancer-target-node-labels                | Comma-separated list of key=value   | -   | ELB,NLB | Specifies a comma-separated list of key-value pairs which will be used to select the target nodes for the load balancer. |