mirror of
https://github.com/openshift/openshift-docs.git
synced 2026-02-05 12:46:18 +01:00
84 lines
2.3 KiB
Plaintext
84 lines
2.3 KiB
Plaintext
// Module included in the following assemblies:
|
|
//
|
|
// * security/external_secrets_operator/external-secrets-operator-proxy.adoc
|
|
|
|
:_mod-docs-content-type: PROCEDURE
|
|
[id="external-secrets-operator-configure-proxy_{context}"]
|
|
= Configuring the egress proxy for the {external-secrets-operator}
|
|
|
|
[role="_abstract"]
|
|
The egress proxy can be configured in the `ExternalSecretsConfig` or the `ExternalSecretsManager` custom resource (CR). The Operator and the operand make use of the {product-title} supported certificate authority (CA) bundle for the proxy validations.
|
|
|
|
.Prerequisites
|
|
|
|
* You have access to the cluster as a user with the `cluster-admin` role.
|
|
|
|
* You have created the `ExternalSecretsConfig` custom CR.
|
|
|
|
.Procedure
|
|
|
|
* To set the proxy in the `ExternalSecretsConfig` resource, perform the following steps:
|
|
|
|
. Edit the `ExternalSecretsConfig` resource by running the following command:
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ oc edit externalsecretsconfigs.operator.openshift.io cluster
|
|
----
|
|
|
|
. Edit the `spec.appConfig.proxy` section to set the proxy values as follows:
|
|
+
|
|
[source,yaml]
|
|
----
|
|
apiVersion: operator.openshift.io/v1alpha1
|
|
kind: ExternalSecretsConfig
|
|
...
|
|
spec:
|
|
appConfig:
|
|
proxy:
|
|
httpProxy: <http_proxy>
|
|
httpsProxy: <https_proxy>
|
|
noProxy: <no_proxy>
|
|
----
|
|
+
|
|
where:
|
|
|
|
<http_proxy>:: Specifies the proxy URL for the http requests.
|
|
|
|
<https_proxy>:: Specifies the proxy URL for the https requests.
|
|
|
|
<no_proxy>:: Specifies a comma-separated list of hostnames, CIDRs, IPs or a combination of these, for which the proxy should not be used.
|
|
|
|
* To set the proxy in the `ExternalSecretsManager` CR, perform the following steps.
|
|
|
|
. Edit the `ExternalSecretsManager` CR by running the following command:
|
|
+
|
|
[source,terminal]
|
|
----
|
|
$ oc edit externalsecretsmanagers.operator.openshift.io cluster
|
|
----
|
|
|
|
. Edit the `spec.globalConfig.proxy` section to set the proxy values as follows:
|
|
+
|
|
[source,yaml]
|
|
----
|
|
apiVersion: operator.openshift.io/v1alpha1
|
|
kind: ExternalSecretsManager
|
|
...
|
|
spec:
|
|
globalConfig:
|
|
proxy:
|
|
httpProxy: <http_proxy>
|
|
httpsProxy: <https_proxy>
|
|
noProxy: <no_proxy>
|
|
----
|
|
|
|
where:
|
|
|
|
<http_proxy>:: Specifies the proxy URL for the http requests.
|
|
|
|
<https_proxy>:: Proxy URL for the https requests.
|
|
|
|
<no_proxy>:: Comma-separated list of hostnames, CIDRs, IPs or a combination of these for which the proxy should not be used.
|
|
|