[Feature] Add automatic support for corporate proxy certificates like Zscaler
- Dominant language
- PowerShell
- Stars
- 66
- Forks
- 50
- PR merge metrics
- No merged PRs in 30d
Description
**Is your feature request related to a problem? Please describe.**
In the past, using an AKS EE with IoT Operations behind a corporate proxy was only possible by manually adjusting the configuration of the deployment manifests and cluster. Since the IoT Ops Team fixed their part, only AKS Edge Team's part is missing. See https://github.com/Azure/azure-iot-operations/issues/31.
**Describe the solution you'd like**
It is still not possible to pull container images until you add proxies certificate to the chain. This can be done by copying proxies .pem file or content to /etc/pki/ca-trust/source/anchors/ and run sudo update-ca-trust and sudo systemctl restart containerd. Since the Zscaler Root CAs are already added to Windows Host Certificate Chain (e.g. via Intune), those certificates should be automatically mounted to the AKS EE!
**Describe alternatives you've considered**
Until now our enterprise is copying the .pem files manually and run the above commands.
**Additional context**
Last tested with `AksEdge-K8s-1.26.6-1.5.203.0`. See also https://github.com/Azure/azure-iot-operations/issues/31.
Contributor guide
Assessment
This issue has not been assessed yet.