Skip to content

Commit 2caf01a

Browse files
authored
Merge pull request #79333 from sveno1990/patch-1
Change CDN 03 to 06
2 parents fe8285b + 45643df commit 2caf01a

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

modules/configuring-firewall.adoc

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -83,7 +83,7 @@ If your environment has a dedicated load balancer in front of your {product-titl
8383
1. In a firewall environment, ensure that the `access.redhat.com` resource is on the allowlist. This resource hosts a signature store that a container client requires for verifying images when pulling them from `registry.access.redhat.com`.
8484
--
8585
+
86-
You can use the wildcards `\*.quay.io` and `*.openshiftapps.com` instead of `cdn.quay.io` and `cdn0[1-3].quay.io` in your allowlist. When you add a site, such as `quay.io`, to your allowlist, do not add a wildcard entry, such as `*.quay.io`, to your denylist. In most cases, image registries use a content delivery network (CDN) to serve images. If a firewall blocks access, image downloads are denied when the initial download request redirects to a hostname such as `cdn01.quay.io`.
86+
You can use the wildcards `\*.quay.io` and `*.openshiftapps.com` instead of `cdn.quay.io` and `cdn0[1-6].quay.io` in your allowlist. When you add a site, such as `quay.io`, to your allowlist, do not add a wildcard entry, such as `*.quay.io`, to your denylist. In most cases, image registries use a content delivery network (CDN) to serve images. If a firewall blocks access, image downloads are denied when the initial download request redirects to a hostname such as `cdn01.quay.io`.
8787

8888
. Set your firewall's allowlist to include any site that provides resources for a language or framework that your builds require.
8989

@@ -343,4 +343,4 @@ endif::oci-agent[]
343343

344344
ifeval::["{context}" == "installing-oci-agent-based-installer"]
345345
:!oci-agent:
346-
endif::[]
346+
endif::[]

0 commit comments

Comments
 (0)