admin/stonks-oracle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: add .celestium.life to NO_PROXY in Kyverno build pod policy

Browse Source 
The Kyverno policy injected HTTP_PROXY into build pods but NO_PROXY
was missing .celestium.life. Docker login to registry.celestium.life
was going through the Squid proxy which does SSL interception,
causing auth failures.
This commit is contained in:
Celes Renata
2026-04-21 02:55:46 +00:00
parent 4282ad11b8
commit b0e64bf90f
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pipelines/woodpecker/kyverno-proxy-ca.yaml
+2 -2
View File
@@ -37,9 +37,9 @@ spec:
- name: HTTPS_PROXY - name: HTTPS_PROXY
value: "http://192.168.42.1:3128" value: "http://192.168.42.1:3128"
- name: NO_PROXY - name: NO_PROXY
value: "10.0.0.0/8,192.168.0.0/16,127.0.0.1,localhost,.local" value: "10.0.0.0/8,192.168.0.0/16,127.0.0.1,localhost,.local,.celestium.life"
- name: no_proxy - name: no_proxy
value: "10.0.0.0/8,192.168.0.0/16,127.0.0.1,localhost,.local" value: "10.0.0.0/8,192.168.0.0/16,127.0.0.1,localhost,.local,.celestium.life"
- name: SSL_CERT_FILE - name: SSL_CERT_FILE
value: "/etc/ssl/certs/proxy-ca.crt" value: "/etc/ssl/certs/proxy-ca.crt"
volumeMounts: volumeMounts: