linkerd / linkerd/linkerd2

Feature Request: Need a way to configure forward proxy settings for injected sidecars

Open
#3,352 5 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

area/install area/proxy help wanted
Dominant language
Go
Stars
11.5k
Forks
1.4k
Avg merge
3d 22h
Merged PRs (30d)
53

Description

## Feature Request
There should be a way to configure forward proxy settings for the injected sidecars.

### What problem are you trying to solve?
We're trying to get Linkerd working in one of our production clusters, which is behind our corporate firewall. Anything that wants to get to the public internet must use our forward proxy. The linkerd-proxy sidecar doesn't use this, so applications which have it injected into their pod are unable to reach the internet.

### How should the problem be solved?
We need a way to configure the linkerd-proxy sidecar to use our forward proxy server, either via environment variables (HTTPS_PROXY etc) or some other mechanism. This configuration should allow for NO_PROXY settings as well.

### Any alternatives you've considered?
We could change the firewall rules on our production cluster to allow all internet traffic out. This is very undesirable.

### How would users interact with this feature?
This could be passed to the linkerd CLI tool by parameters. Something like:
`linkerd install --forward-proxy-https=my-proxy.corp.net --forward-proxy-noproxy=127.0.0.1,.corp.net,.svc | kubectl apply -f -`

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the linkerd CLI install entry point and the injected linkerd-proxy configuration, then trace how install parameters become sidecar settings. Done means forward-proxy and NO_PROXY values can be configured for injected sidecars and the resulting manifests work with kubectl.

Written by the indexing model from the issue text.

Assessment

Tech stack
go, kubernetes
Domain
cli, infrastructure
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.