Skip to content

Commit 81e34a8

Browse files
Merge pull request #50442 from snarayan-redhat/CFE561_proxy
CFE#561: Add additionalTrustBundlePolicy field
2 parents ba98da3 + e2aa4a6 commit 81e34a8

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

modules/installation-configure-proxy.adoc

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -207,6 +207,7 @@ additionalTrustBundle: | <4>
207207
-----BEGIN CERTIFICATE-----
208208
<MY_TRUSTED_CA_CERT>
209209
-----END CERTIFICATE-----
210+
additionalTrustBundlePolicy: <policy_to_add_additionalTrustBundle> <5>
210211
----
211212
<1> A proxy URL to use for creating HTTP connections outside the cluster. The
212213
URL scheme must be `http`.
@@ -225,6 +226,7 @@ Operator then creates a `trusted-ca-bundle` config map that merges the contents
225226
with the {op-system} trust bundle. The `additionalTrustBundle` field is required unless
226227
the proxy's identity certificate is signed by an authority from the {op-system} trust
227228
bundle.
229+
<5> Optional: The policy to determine the configuration of the `Proxy` object to reference the `user-ca-bundle` config map in the `trustedCA` field. The allowed values are `Proxyonly` and `Always`. Use `Proxyonly` to reference the `user-ca-bundle` config map only when `http/https` proxy is configured. Use `Always` to always reference the `user-ca-bundle` config map. The default value is `Proxyonly`.
228230
+
229231
[NOTE]
230232
====

0 commit comments

Comments
 (0)