Clean up examples

docs/guidance/ingress.md

@@ -5,6 +5,9 @@ Here we provide some examples to show how to use ingress to access your Ray clus
   * [Example: AWS Application Load Balancer (ALB) Ingress support on AWS EKS](#example-aws-application-load-balancer-alb-ingress-support-on-aws-eks)
   * [Example: Manually setting up NGINX Ingress on KinD](#example-manually-setting-up-nginx-ingress-on-kind)
 
+
+> :warning: **Only expose Ingresses to authorized users. The Ray Dashboard also enables job submission.**
+
 ### Example: AWS Application Load Balancer (ALB) Ingress support on AWS EKS
 #### Prerequisite
 * Follow the document [Getting started with Amazon EKS – AWS Management Console and AWS CLI](https://docs.aws.amazon.com/eks/latest/userguide/getting-started-console.html#eks-configure-kubectl) to create an EKS cluster.

ray-operator/config/samples/ray-cluster-alb-ingress.yaml

@@ -3,7 +3,9 @@ kind: Ingress
 metadata:
   name: ray-cluster-ingress
   annotations:
-    alb.ingress.kubernetes.io/scheme: internet-facing
+    # NOTE, do not expose the head service directly. Access to this service
+    # allows complete access to the Ray Cluster.
+    alb.ingress.kubernetes.io/scheme: internal
     alb.ingress.kubernetes.io/tags: Environment=dev,Team=test
     # See `ingress.md` for more details about how to choose subnets.
     alb.ingress.kubernetes.io/subnets: subnet-0930d6b677fb40a74, subnet-0066ab2e15925618c 

ray-operator/config/samples/ray-cluster.separate-ingress.yaml

@@ -36,6 +36,7 @@ spec:
             name: client
 ---
 # Ingress for raycluster
+# WARNING: Acess control must be handled by Nginx. The Ray Cluster doe snot handle authentication
 apiVersion: networking.k8s.io/v1
 kind: Ingress
 metadata: