Need proxy label

[nguyenhuukhoi]

Hello guys.

Could we add proxy labels for this driver?
It will be a nice feature.

I am trying understand our code.

Thank you.

[nguyenhuukhoi]

This can achieve by add openstack user-config when we launch instances. Could you give some keywords to code this function. I cannot find location which I inspect this option.

[mnaser]

@ngyenhuukhoi do you mean you want the VMs to be created would have an HTTP proxy configured on them? (Curious if @jrosser is interested by it)

[nguyenhuukhoi]

yes, it looks like we cannot deploy magnum cluster under proxy. I have to add http proxy for containerd to images first and it is not flexible.

[jrosser]

I did a bunch of work to the heat driver in the past to support deployment of workload clusters behind a proxy server.

That said, I've not looked at this at all for magnum-cluster-api and whilst I can use a local registry to prove that the workload cluster deployment is successful behind a proxy this fairly obviously leaves users with a functional but unusable cluster.

[nguyenhuukhoi]

Hello.
Does insecure registry still can use with this driver?

[jrosser]

@mnaser I think that this issue needs re-opening.

A systemd drop-in for containerd which sets http/https_proxy environment, potentially also no_proxy for anything specified in container_infra_prefix will likely get things to the point where a workload cluster deployment will succeed behind an https proxy.

With certainty, the most wrong thing to do would be set proxy environment vars in /etc/environment, as this breaks absolutely everything about the https traffic internal to the cluster.

There is a question about how far to take this, such as also dropping proxy config for apt.

[nguyenhuukhoi]

Hello. Any updates on this.

[mnaser]

@nguyenhuukhoi this has been fixed by #281 thanks to @andrewbonney ! :)

[nguyenhuukhoi]

Thank you very much.

…

On Mon, Apr 1, 2024, 3:27 AM Mohammed Naser ***@***.***> wrote: @nguyenhuukhoi <https://github.com/nguyenhuukhoi> this has been fixed by #281 <#281> thanks to @andrewbonney <https://github.com/andrewbonney> ! :) — Reply to this email directly, view it on GitHub <#258 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ADRLKQKYNPX7KEDPAWWRWC3Y3BWSPAVCNFSM6AAAAAA7YTPE6CVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAMRYHA4TMNRQGU> . You are receiving this because you were mentioned.Message ID: ***@***.***>