Skip to content

Commit 8c7592a

Browse files
authored
Merge pull request #51687 from Rupesh-git-eng/patch-5
Update configuring-firewall.adoc
2 parents 935e4b4 + 9ac3afd commit 8c7592a

File tree

1 file changed

+1
-5
lines changed

1 file changed

+1
-5
lines changed

modules/configuring-firewall.adoc

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -38,17 +38,13 @@ There are no special configuration considerations for services running on only c
3838
|443, 80
3939
|Provides core container images
4040

41-
|`cdn03.quay.io`
42-
|443, 80
43-
|Provides core container images
44-
4541
|`sso.redhat.com`
4642
|443, 80
4743
|The `https://console.redhat.com/openshift` site uses authentication from `sso.redhat.com`
4844

4945
|===
5046
+
51-
You can use the wildcards `\*.quay.io` and `*.openshiftapps.com` instead of `cdn0[1-3].quay.io` in your allowlist. When you add a site, such as `quay.io`, to your allowlist, do not add a wildcard entry, such as `*.quay.io`, to your denylist. In most cases, image registries use a content delivery network (CDN) to serve images. If a firewall blocks access, then image downloads are denied when the initial download request is redirected to a hostname such as `cdn01.quay.io`.
47+
You can use the wildcards `\*.quay.io` and `*.openshiftapps.com` instead of `cdn0[1-2].quay.io` in your allowlist. When you add a site, such as `quay.io`, to your allowlist, do not add a wildcard entry, such as `*.quay.io`, to your denylist. In most cases, image registries use a content delivery network (CDN) to serve images. If a firewall blocks access, then image downloads are denied when the initial download request is redirected to a hostname such as `cdn01.quay.io`.
5248

5349
. Allowlist any site that provides resources for a language or framework that your builds require.
5450

0 commit comments

Comments
 (0)