mirror of
https://github.com/rancher/rancher-docs.git
synced 2026-09-26 13:08:11 +00:00
Merge pull request #3841 from jtravee/proxy-config-airgapped
Added proxy configuration for air-gapped local cluster behind proxy
This commit is contained in:
+19
-1
@@ -9,7 +9,7 @@ Once the infrastructure is ready, you can continue with setting up an RKE cluste
|
|||||||
|
|
||||||
First, you have to install Docker and setup the HTTP proxy on all three Linux nodes. For this perform the following steps on all three nodes.
|
First, you have to install Docker and setup the HTTP proxy on all three Linux nodes. For this perform the following steps on all three nodes.
|
||||||
|
|
||||||
For convenience export the IP address and port of your proxy into an environment variable and set up the HTTP_PROXY variables for your current shell:
|
For convenience, export the IP address and port of your proxy into an environment variable and set up the HTTP_PROXY variables for your current shell:
|
||||||
|
|
||||||
```
|
```
|
||||||
export proxy_host="10.0.0.5:8888"
|
export proxy_host="10.0.0.5:8888"
|
||||||
@@ -58,6 +58,24 @@ sudo systemctl daemon-reload
|
|||||||
sudo systemctl restart docker
|
sudo systemctl restart docker
|
||||||
```
|
```
|
||||||
|
|
||||||
|
#### Air-gapped proxy
|
||||||
|
|
||||||
|
_New in v2.6.4_
|
||||||
|
|
||||||
|
You can now provision node driver clusters from an air-gapped cluster configured to use a proxy for outbound connections.
|
||||||
|
|
||||||
|
In addition to setting the default rules for a proxy server, you will need to add additional rules, shown below, to provision node driver clusters from a proxied Rancher environment.
|
||||||
|
|
||||||
|
You will configure your filepath according to your setup, e.g., `/etc/apt/apt.conf.d/proxy.conf`:
|
||||||
|
|
||||||
|
```
|
||||||
|
acl SSL_ports port 22
|
||||||
|
acl SSL_ports port 2376
|
||||||
|
|
||||||
|
acl Safe_ports port 22 # ssh
|
||||||
|
acl Safe_ports port 2376 # docker port
|
||||||
|
```
|
||||||
|
|
||||||
### Creating the RKE Cluster
|
### Creating the RKE Cluster
|
||||||
|
|
||||||
You need several command line tools on the host where you have SSH access to the Linux nodes to create and interact with the cluster:
|
You need several command line tools on the host where you have SSH access to the Linux nodes to create and interact with the cluster:
|
||||||
|
|||||||
+18
@@ -40,3 +40,21 @@ docker run -d --restart=unless-stopped \
|
|||||||
```
|
```
|
||||||
|
|
||||||
Privileged access is [required.]({{<baseurl>}}/rancher/v2.6/en/installation/other-installation-methods/single-node-docker/#privileged-access-for-rancher)
|
Privileged access is [required.]({{<baseurl>}}/rancher/v2.6/en/installation/other-installation-methods/single-node-docker/#privileged-access-for-rancher)
|
||||||
|
|
||||||
|
### Air-gapped proxy configuration
|
||||||
|
|
||||||
|
_New in v2.6.4_
|
||||||
|
|
||||||
|
You can now provision node driver clusters from an air-gapped cluster configured to use a proxy for outbound connections.
|
||||||
|
|
||||||
|
In addition to setting the default rules for a proxy server as shown above, you will need to add additional rules, shown below, to provision node driver clusters from a proxied Rancher environment.
|
||||||
|
|
||||||
|
You will configure your filepath according to your setup, e.g., `/etc/apt/apt.conf.d/proxy.conf`:
|
||||||
|
|
||||||
|
```
|
||||||
|
acl SSL_ports port 22
|
||||||
|
acl SSL_ports port 2376
|
||||||
|
|
||||||
|
acl Safe_ports port 22 # ssh
|
||||||
|
acl Safe_ports port 2376 # docker port
|
||||||
|
```
|
||||||
Reference in New Issue
Block a user