Merge pull request #96338 from jldohmann/OCPBUGS-54538

jldohmann · web-flow · commit a01c84c0eba7 · 2025-07-24T10:38:25.000-07:00
OCPBUGS-54538: remove openshiftapps domain
diff --git a/modules/configuring-firewall.adoc b/modules/configuring-firewall.adoc
@@ -83,7 +83,7 @@ If your environment has a dedicated load balancer in front of your {product-titl
 |The `https://console.redhat.com` site uses authentication from `sso.redhat.com`
 |===
 +
-* You can use the wildcards `\*.quay.io` and `*.openshiftapps.com` instead of `cdn.quay.io` and `cdn0[1-6].quay.io` in your allowlist.
+* You can use the wildcard `*.quay.io` instead of `cdn.quay.io` and `cdn0[1-6].quay.io` in your allowlist.
 * You can use the wildcard `*.access.redhat.com` to simplify the configuration and ensure that all subdomains, including `registry.access.redhat.com`, are allowed.
 * When you add a site, such as `quay.io`, to your allowlist, do not add a wildcard entry, such as `*.quay.io`, to your denylist. In most cases, image registries use a content delivery network (CDN) to serve images. If a firewall blocks access, image downloads are denied when the initial download request redirects to a hostname such as `cdn01.quay.io`.
 

Original file line number	Diff line number	Diff line change
`@@ -83,7 +83,7 @@ If your environment has a dedicated load balancer in front of your {product-titl`
`83`	`83`	\|The `https://console.redhat.com` site uses authentication from `sso.redhat.com`
`84`	`84`	`\|===`
`85`	`85`	`+`
`86`		-* You can use the wildcards `\.quay.io` and `.openshiftapps.com` instead of `cdn.quay.io` and `cdn0[1-6].quay.io` in your allowlist.
	`86`	+* You can use the wildcard `*.quay.io` instead of `cdn.quay.io` and `cdn0[1-6].quay.io` in your allowlist.
`87`	`87`	* You can use the wildcard `*.access.redhat.com` to simplify the configuration and ensure that all subdomains, including `registry.access.redhat.com`, are allowed.
`88`	`88`	* When you add a site, such as `quay.io`, to your allowlist, do not add a wildcard entry, such as `*.quay.io`, to your denylist. In most cases, image registries use a content delivery network (CDN) to serve images. If a firewall blocks access, image downloads are denied when the initial download request redirects to a hostname such as `cdn01.quay.io`.
`89`	`89`