Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support for implementing cluster-wide proxy on ARO clusters #294

Open
sureshgaikwad opened this issue Oct 28, 2022 · 0 comments
Open

Support for implementing cluster-wide proxy on ARO clusters #294

sureshgaikwad opened this issue Oct 28, 2022 · 0 comments

Comments

@sureshgaikwad
Copy link

sureshgaikwad commented Oct 28, 2022

Most of the customers who are having the mandate to use a proxy as an additional layer of security have to route all the egress traffic through the proxy. There are multiple use cases where the platform traffic needs to go out via the internet. Some of these are:

  1. Pulling platform images from registry.redhat.io
    We do pull some images from this registry and if the customer has the mandate to use the proxy (which is not transparent), even if they whitelist the URL, the image pull will fail.

  2. Application image pull from external registries
    If we are using the external centralized registry to pull the images which are outside Azure, the communication will happen over the internet. Again, the image pulls will happen on the nodes and they will fail if the proxy is not configured.

  3. Pipelines will break if they are configured for multiple clusters across hyperscalers

  4. DevOps tools may break as well

  5. If I am using Submariner to establish communication between multiple clusters, it will break

  6. Autoscaling will fail if the coreOS images can't be pulled.

  7. If the egress IP is configured, that may fail as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant