Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 9 additions & 3 deletions modules/nw-proxy-configure-object.adoc
Original file line number Diff line number Diff line change
Expand Up @@ -93,21 +93,27 @@ spec:
trustedCA:
name: user-ca-bundle <5>
----
+
--
<1> A proxy URL to use for creating HTTP connections outside the cluster. The
URL scheme must be `http`.
<2> A proxy URL to use for creating HTTPS connections outside the cluster. If
this is not specified, then `httpProxy` is used for both HTTP and HTTPS
connections.
<3> A comma-separated list of destination domain names, domains, IP addresses or
other network CIDRs to exclude proxying. Preface a domain with `.` to include
all subdomains of that domain. Use `*` to bypass proxy for all destinations.
Note that if you scale up workers not included in `networking.machineNetwork[].cidr` from the installation configuration, you must add them to this list to prevent connection issues.
other network CIDRs to exclude proxying.
+
Preface a domain with `.` to include all the subdomains of that domain. Use `*` to bypass the proxy for all destinations.
If you scale up workers that are not included in the network defined by the `networking.machineNetwork[].cidr` field from the installation configuration, you must add them to this list to prevent connection issues.
Comment thread
jboxman marked this conversation as resolved.
+
This field is ignored if neither the `httpProxy` or `httpsProxy` fields are set.
<4> One or more URLs external to the cluster to use to perform a readiness check
before writing the `httpProxy` and `httpsProxy` values to status.
<5> A reference to the ConfigMap in the `openshift-config` namespace that
contains additional CA certificates required for proxying HTTPS connections.
Note that the ConfigMap must already exist before referencing it here. This
field is required unless the proxy's identity certificate is signed by an
authority from the RHCOS trust bundle.
--

. Save the file to apply the changes.