1.3 KiB
Setting up Environment Proxy
If you set http and https proxy, all nodes and loadbalancer will be excluded from proxy with generating no_proxy variable in roles/kubespray-defaults/tasks/no_proxy.yml, if you have additional resources for exclude add them to additional_no_proxy variable. If you want fully override your no_proxy setting, then fill in just no_proxy and no nodes or loadbalancer addresses will be added to no_proxy.
Set proxy for http and https
http_proxy:"http://example.proxy.tld:port"
https_proxy:"http://example.proxy.tld:port"
Set custom CA
CA must be already on each target nodes
https_proxy_cert_file: /path/to/host/custom/ca.crt
Set default no_proxy (this will override default no_proxy generation)
no_proxy: "node1,node1_ip,node2,node2_ip...additional_host"
Set additional addresses to default no_proxy (all cluster nodes and loadbalancer)
additional_no_proxy: "additional_host1,additional_host2"
Exclude workers from no_proxy
Since workers are included in the no_proxy variable, by default, docker engine will be restarted on all nodes (all
pods will restart) when adding or removing workers. To override this behaviour by only including control plane nodes in the
no_proxy variable, set:
no_proxy_exclude_workers: true