Azure / Azure/AKS-Edge

[Feature] Add automatic support for corporate proxy certificates like Zscaler

Open
#170 1 comment 0 reactions 2 assignees Claimed by @SummerSmith View on GitHub
enhancement
Dominant language
PowerShell
Stars
66
Forks
50
PR merge metrics
No merged PRs in 30d

Description

**Is your feature request related to a problem? Please describe.**
In the past, using an AKS EE with IoT Operations behind a corporate proxy was only possible by manually adjusting the configuration of the deployment manifests and cluster. Since the IoT Ops Team fixed their part, only AKS Edge Team's part is missing. See https://github.com/Azure/azure-iot-operations/issues/31.

**Describe the solution you'd like**
It is still not possible to pull container images until you add proxies certificate to the chain. This can be done by copying proxies .pem file or content to /etc/pki/ca-trust/source/anchors/ and run sudo update-ca-trust and sudo systemctl restart containerd. Since the Zscaler Root CAs are already added to Windows Host Certificate Chain (e.g. via Intune), those certificates should be automatically mounted to the AKS EE!

**Describe alternatives you've considered**
Until now our enterprise is copying the .pem files manually and run the above commands.

**Additional context**
Last tested with `AksEdge-K8s-1.26.6-1.5.203.0`. See also https://github.com/Azure/azure-iot-operations/issues/31.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.