7.7. Configuring the proxy for secured cluster services in RHACS Cloud Service
You must configure the proxy settings for secured cluster services within the Red Hat Advanced Cluster Security Cloud Service (RHACS Cloud Service) environment to establish a connection between the Secured Cluster and the specified proxy server. This ensures reliable data collection and transmission.
7.7.1. Specifying the environment variables in the SecuredCluster CR 링크 복사링크가 클립보드에 복사되었습니다!
To configure an egress proxy, you can either use the cluster-wide Red Hat OpenShift proxy or specify the HTTP_PROXY, HTTPS_PROXY, and NO_PROXY environment variables within the SecuredCluster Custom Resource (CR) configuration file to ensure proper use of the proxy and bypass for internal requests within the specified domain.
The proxy configuration applies to all running services: Sensor, Collector, Admission Controller and Scanner.
Procedure
Specify the
HTTP_PROXY,HTTPS_PROXY, andNO_PROXYenvironment variables under the customize specification in the SecuredCluster CR configuration file:For example:
# proxy collector customize: envVars: - name: HTTP_PROXY value: http://egress-proxy.stackrox.svc:xxxx - name: HTTPS_PROXY value: http://egress-proxy.stackrox.svc:xxxx - name: NO_PROXY value: .stackrox.svcwhere:
customize.envVars.value.name:<HTTP_PROXY>-
Specifies the value of the
HTTP_PROXYvariable. This is the proxy server used for HTTP connections. customize.envVars.value.name:<HTTPS_PROXY>-
Specifies the value of the
HTTPS_PROXYvariable. This is the proxy server used for HTTPS connections. customize.envVars.value.name:<NO_PROXY>-
Specifies the value of the
NO _PROXYvariable. This variable is used to define the hostname or IP address that should not be accessed through the proxy server.