Skip to content

Commit 09b8c5e

Browse files
committed
OSDOCS-4471: Adding cdn03.quay.io back to the list
1 parent 3e73c12 commit 09b8c5e

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

modules/configuring-firewall.adoc

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,13 +38,17 @@ There are no special configuration considerations for services running on only c
3838
|443, 80
3939
|Provides core container images
4040

41+
|`cdn03.quay.io`
42+
|443, 80
43+
|Provides core container images
44+
4145
|`sso.redhat.com`
4246
|443, 80
4347
|The `https://console.redhat.com/openshift` site uses authentication from `sso.redhat.com`
4448

4549
|===
4650
+
47-
You can use the wildcards `\*.quay.io` and `*.openshiftapps.com` instead of `cdn0[1-2].quay.io` in your allowlist. When you add a site, such as `quay.io`, to your allowlist, do not add a wildcard entry, such as `*.quay.io`, to your denylist. In most cases, image registries use a content delivery network (CDN) to serve images. If a firewall blocks access, then image downloads are denied when the initial download request is redirected to a hostname such as `cdn01.quay.io`.
51+
You can use the wildcards `\*.quay.io` and `*.openshiftapps.com` instead of `cdn0[1-3].quay.io` in your allowlist. When you add a site, such as `quay.io`, to your allowlist, do not add a wildcard entry, such as `*.quay.io`, to your denylist. In most cases, image registries use a content delivery network (CDN) to serve images. If a firewall blocks access, image downloads are denied when the initial download request redirects to a hostname such as `cdn01.quay.io`.
4852

4953
. Allowlist any site that provides resources for a language or framework that your builds require.
5054

0 commit comments

Comments
 (0)