proxy - 在kubernetes集群中设置no_proxy

Question

我想在Pod中设置http / https代理，并通过环境传递这些变量。但是，我还需要设置no_proxy。在k8s-inside-communication中，我应该赋予哪些值不破坏某些内容？据我所知，有一些默认服务，例如“kubernetes.default.svc”。

Answer 1

您可以按照OpenShift Container Platform bug 1467776中的说明，将.svc添加到no_proxy中(如PR 4678所示)

.svc domain was added into service env file after installation.

[root@qe-gpei-etcd-sc-master-1 sysconfig]# grep NO_PROXY * -r
atomic-openshift-master:NO_PROXY=.cluster.local,.svc,qe-gpei-etcd-sc-master-1,172.30.0.0/16,10.128.0.0/14
docker:NO_PROXY='.cluster.local,.svc,qe-gpei-etcd-sc-master-1'
[root@qe-gpei-etcd-sc-master-1 sysconfig]# docker info |grep "No Proxy"
WARNING: bridge-nf-call-iptables is disabled
WARNING: bridge-nf-call-ip6tables is disabled
No Proxy: .cluster.local,.svc,qe-gpei-etcd-sc-master-1