For some production environments, direct access to the Internet could be blocked. Those environments typically only allow Internet access through HTTP or HTTPS proxies.
Konvoy can be configured to use HTTP/HTTPS proxy for Internet access. This applies to all Kubernetes components, as well as workloads running on top of Kubernetes, assuming the workloads understand standard HTTP/HTTPS proxy environment variables:
HTTP_PROXY: the HTTP proxy server address.
HTTPS_PROXY: the HTTPS proxy server address. (Ansible only supports
NO_PROXY: a list of IPs and domain names that are not subject to proxy settings.
Before you start
Make sure the proxy server is running and functional.
You can verify this using the
curl command from a node in the cluster.
http://proxy.company.com:3128 is the HTTP proxy server address.
http_proxy=http://proxy.company.com:3128 curl --head www.google.com
If the proxy is working properly, you receive a
200 OK HTTP response.
Install Konvoy with HTTP/HTTPS proxies
Edit the cluster configuration file
cluster.yaml to specify HTTP/HTTPS proxies for the cluster.
kind: ClusterConfiguration apiVersion: konvoy.mesosphere.io/v1alpha1 spec: kubernetes: networking: httpProxy: "http://proxy.company.com:3128" httpsProxy: "http://proxy.company.com:3129" noProxy: - "localhost" - "127.0.0.1" - "company.com" - "mycluster.icp:8500"
This example configures the Kubernetes cluster installed by Konvoy to use proxy server
http://proxy.company.com:3128 for all HTTP traffic and proxy server
http://proxy.company.com:3129 for all HTTPS traffic, except for those HTTP/HTTPS requests to
This configuration only applies to the core Kubernetes components. In this case, you must next configure the HTTP_PROXY settings for all other workloads that require access to the Internet.
All the proxy-related fields are optional.
Konvoy applies the proxy configuration automatically after you run the following command:
These proxy settings will be used by the binary itself (not Kubernetes cluster machines) to download addon configurations over the Internet.