10.2. Configuring a proxy during installation

Procedure

1. Open the configuration file central/proxy-config-secret.yaml from your deployment bundle directory.

   참고

   If you are using Helm the configuration file is at central/templates/proxy-config-secret.yaml.

2. Edit the fields you want to modify in the configuration file:

   apiVersion: v1
   kind: Secret
   metadata:
     namespace: stackrox
     name: proxy-config
   type: Opaque
   stringData:
     config.yaml: |-
       # # NOTE: Both central and scanner should be restarted if this secret is changed.
       # # While it is possible that some components will pick up the new proxy configuration
       # # without a restart, it cannot be guaranteed that this will apply to every possible
       # # integration etc.
       # url: http://proxy.name:port
       # username: username
       # password: password
       # # If the following value is set to true, the proxy wil NOT be excluded for the default hosts:
       # # - *.stackrox, *.stackrox.svc
       # # - localhost, localhost.localdomain, 127.0.0.0/8, ::1
       # # - *.local
       # omitDefaultExcludes: false
       # excludes:  # hostnames (may include * components) for which you do not
       # # want to use a proxy, like in-cluster repositories.
       # - some.domain
       # # The following configuration sections allow specifying a different proxy to be used for HTTP(S) connections.
       # # If they are omitted, the above configuration is used for HTTP(S) connections as well as TCP connections.
       # # If only the `http` section is given, it will be used for HTTPS connections as well.
       # # Note: in most cases, a single, global proxy configuration is sufficient.
       # http:
       #   url: http://http-proxy.name:port
       #   username: username
       #   password: password
       # https:
       #   url: http://https-proxy.name:port
       #   username: username
       #   password: password

   where:

   username and password

   (Optional) Specifies the username and password. These fields are optional at the beginning and in the http and https sections.

   url

   Specifies the URL of the proxy. Supports the following URL schemes:

   • http:// for an HTTP proxy
   • https:// for a TLS-enabled HTTP proxy
   • socks5:// for a SOCKS5 proxy

   excludes

   Specifies a list of DNS names, with or without * wildcards, IP addresses, or IP blocks in CIDR notation, for example, 10.0.0.0/8. The values in this list are applied to all outgoing connections, regardless of protocol.

   |-

   Specifies the start of the configuration data when inserted into the stringData section.

   참고

   • When you first open the file, all values are commented out (by using the # sign at the beginning of the line). Lines starting with double hash signs # # contain explanation of the configuration keys.
   • Make sure that when you edit the fields, you maintain an indentation level of two spaces relative to the config.yaml: |- line.

3. After editing the configuration file, you can proceed with your usual installation. The updated configuration instructs Red Hat Advanced Cluster Security for Kubernetes to use the proxy running on the provided address and the port number.