With CD17, a change was introduced which prohibits all projects with jboss-parent as a parent project, to use HTTP (insecure) proxies. The change is here: https://github.com/jboss/jboss-parent-pom/blob/jboss-parent-35/pom.xml#L699
Quickstarts are affected. This probably needs to be documented with quickstarts - where exactly, I leave on your decision. But it certainly also needs to be documented with OpenShift - https://doc-stage.usersys.redhat.com/documentation/en-us/jboss_enterprise_application_platform_continuous_delivery/17/html-single/getting_started_with_jboss_eap_for_openshift_container_platform/ chapter 7.13.5. Environment Variables (at least, maybe in other places as well). This concerns the property MAVEN_MIRROR_URL.