Loading...

XML

Word

Printable

Details

Type: Story
Resolution: Done
Priority: Critical
Fix Version/s: None
Affects Version/s: None
Component/s: None
Labels:
- docs-ack
- groomed
- qe-ack

Story Points:
3
Blocked:
False
Blocked Reason:
None
Ready:
False
Epic Link:
Transparent network proxy installs via install-config
Feature Link:
OCPPLAN-8668 - Transparent Network proxy installs via install-config

Sprint:
CFE Sprint 219, CFE Sprint 220, CFE Sprint 222, CFE Sprint 223, CFE Sprint 224, CFE Sprint 225
RICE Score:
0
Customer Impact:

Customer Facing

SFDC Cases Links:
SFDC Cases Counter:

Description

Description :

Setting '*' (wildcard character) for noProxy configuration, means to allow all traffic for the components that are using the proxy configuration. When there is no http/https proxy set and additionalTrustBundle configured, it signifies that there is a transparent proxy which requires all traffic to use the additionalTrustBundle to connect.

As "*" does not actually represent the behaviour of usage for additionalTrustBundle, new policy filed "additionalTrustBundle" must be added. The values can be "Proxyonly" and "Always".

Acceptance criteria :

Supports Day-0 requirement for generating proxy manifests with noProxy and user-ca-bundle.
Installer supports for noProxy with only wildcard character.
Cluster-network-operator supports noProxy validation.