Azure / Azure/OpenShift

Support for implementing cluster-wide proxy on ARO clusters

Open
#294 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
121
Forks
42
PR merge metrics
No merged PRs in 30d

Description

Most of the customers who are having the mandate to use a proxy as an additional layer of security have to route all the egress traffic through the proxy. There are multiple use cases where the platform traffic needs to go out via the internet. Some of these are:

1. Pulling platform images from [registry.redhat.io](http://registry.redhat.io/)
We do pull some images from this registry and if the customer has the mandate to use the proxy (which is not transparent), even if they whitelist the URL, the image pull will fail.

2. Application image pull from external registries
If we are using the external centralized registry to pull the images which are outside Azure, the communication will happen over the internet. Again, the image pulls will happen on the nodes and they will fail if the proxy is not configured.

3. Pipelines will break if they are configured for multiple clusters across hyperscalers
4. DevOps tools may break as well
5. If I am using Submariner to establish communication between multiple clusters, it will break
6. Autoscaling will fail if the coreOS images can't be pulled.
7. If the egress IP is configured, that may fail as well.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.