openstack/magnum
Code Issues Proposed changes
3d17c6eb49
magnum/doc/source/admin/magnum-proxy.rst
David Rabel a400ea7980 Fix doc format 
Blank line broke formatting in doc/source/user/index.rst. I therefore
deleted it.

Use code blocks instead of indentation in admin/magnum-proxy.rst
Old indentation was wrongly formated as quotation.

contributor/api-microversion.rst : Note was wrongly indented and
therefore interpreted as a quotation.

Change-Id: I47797a05be22a3b38f7994432ed75b67b6a4962a
2018-08-13 13:43:28 +02:00

3.1 KiB
Raw Blame History

Using Proxies in magnum if running under firewall

If you are running magnum behind a firewall then you may need a proxy for using services like docker, kubernetes and mesos. Use these steps when your firewall will not allow you to use those services without a proxy.

NOTE: This feature has only been tested with the supported cluster type and associated image: Kubernetes and Swarm use the Fedora Atomic image, and Mesos uses the Ubuntu image.

Proxy Parameters to define before use

  1. http-proxy

Address of a proxy that will receive all HTTP requests and relay them. The format is a URL including a port number. For example: http://10.11.12.13:8000 or http://abcproxy.com:8000

  1. https-proxy

Address of a proxy that will receive all HTTPS requests and relay them. The format is a URL including a port number. For example: https://10.11.12.13:8000 or https://abcproxy.com:8000

  1. no-proxy

A comma separated list of IP addresses or hostnames that should bypass your proxy, and make connections directly.

NOTE: You may not express networks/subnets. It only accepts names and ip addresses. Bad example: 192.168.0.0/28.

Steps to configure proxies.

You can specify all three proxy parameters while creating ClusterTemplate of any coe type. All of proxy parameters are optional.

$ openstack coe cluster template create k8s-cluster-template \
                    --image fedora-atomic-latest \
                    --keypair testkey \
                    --external-network public \
                    --dns-nameserver 8.8.8.8 \
                    --flavor m1.small \
                    --coe kubernetes \
                    --http-proxy <http://abc-proxy.com:8080> \
                    --https-proxy <https://abc-proxy.com:8080> \
                    --no-proxy <172.24.4.4,172.24.4.9,172.24.4.8>
$ openstack coe cluster template create swarm-cluster-template \
                    --image fedora-atomic-latest \
                    --keypair testkey \
                    --external-network public \
                    --dns-nameserver 8.8.8.8 \
                    --flavor m1.small \
                    --coe swarm \
                    --http-proxy <http://abc-proxy.com:8080> \
                    --https-proxy <https://abc-proxy.com:8080> \
                    --no-proxy <172.24.4.4,172.24.4.9,172.24.4.8>
$ openstack coe cluster template create mesos-cluster-template \
                    --image ubuntu-mesos \
                    --keypair testkey \
                    --external-network public \
                    --dns-nameserver 8.8.8.8 \
                    --flavor m1.small \
                    --coe mesos \
                    --http-proxy <http://abc-proxy.com:8080> \
                    --https-proxy <https://abc-proxy.com:8080> \
                    --no-proxy <172.24.4.4,172.24.4.9,172.24.4.8>