30 lines
1.3 KiB
Markdown
30 lines
1.3 KiB
Markdown
|
# Setting up Environment Proxy
|
||
|
|
|
||
|
If you set http and https proxy, all nodes and loadbalancer will be excluded from proxy with generating no_proxy variable in `roles/kubespray-defaults/tasks/no_proxy.yml`, if you have additional resources for exclude add them to `additional_no_proxy` variable. If you want fully override your `no_proxy` setting, then fill in just `no_proxy` and no nodes or loadbalancer addresses will be added to no_proxy.
|
||
|
|
|
||
|
|
## Set proxy for http and https
|
||
|
|
|
||
|
|
`http_proxy:"http://example.proxy.tld:port"`
|
||
|
|
`https_proxy:"http://example.proxy.tld:port"`
|
||
|
|
|
||
|
## Set custom CA
|
||
|
|
|
||
|
|
CA must be already on each target nodes
|
||
|
|
|
||
|
|
`https_proxy_cert_file: /path/to/host/custom/ca.crt`
|
||
|
|
|
||
|
|
## Set default no_proxy (this will override default no_proxy generation)
|
||
|
|
|
||
|
|
`no_proxy: "node1,node1_ip,node2,node2_ip...additional_host"`
|
||
|
|
|
||
|
|
## Set additional addresses to default no_proxy (all cluster nodes and loadbalancer)
|
||
|
|
|
||
|
`additional_no_proxy: "additional_host1,additional_host2"`
|
||
|
|
||
|
|
## Exclude workers from no_proxy
|
||
|
|
|
||
|
|
Since workers are included in the no_proxy variable, by default, docker engine will be restarted on all nodes (all
|
||
|
pods will restart) when adding or removing workers. To override this behaviour by only including control plane nodes in the
|
||
|
|
no_proxy variable, set:
|
||
|
|
`no_proxy_exclude_workers: true`
|