This was previously done in the quay-osbs[1] repo when manually pulling the sources.

For upstream, this is done in the Dockerfile[2].

None of these options work downstream. Dependencies can only be fetched via cachito, and cachito only downloads dependencies from package managers.

We need to find a different solution where:

• The ip ranges are kept up-to-date without human intervention
• The ip ranges are updated on a schedule (every week? every month?)

We could either store the files in the git repo and write some sort of automation to keep them up-to-date, or update the code that reads the file[3] to get the ip ranges and cache them on redis instead (setting a sensible expiration date).

[1] https://github.com/quay/quay-osbs/blob/quay-3.6-rhel-8/Makefile#L16

[2] https://github.com/quay/quay/blob/master/Dockerfile#L177

[3] https://github.com/quay/quay/blob/master/util/ipresolver/__init__.py#L29