Skip to content

Commit af1a84f

Browse files
authored
Merge pull request #31922 from skrthomas/BZ1886291v2
2 parents 6352f62 + f980389 commit af1a84f

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

modules/configuring-firewall.adoc

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ There are no special configuration considerations for services running on only c
2222
|Provides core container images
2323

2424
|`quay.io`
25-
|443 or 80
25+
|443, 80
2626
|Provides core container images
2727

2828
|`*.quay.io`
@@ -39,9 +39,9 @@ There are no special configuration considerations for services running on only c
3939

4040
|===
4141
+
42-
When you add a site such as `quay.io` to your allowlist, do not add a wildcard entry such as `*.quay.io` to your denylist. In most cases, image registries use a content delivery network (CDN) to serve images. If a firewall blocks access, then image downloads are denied when the initial download request is redirected to a host name such as `cdn01.quay.io`.
42+
When you add a site, such as `quay.io`, to your allowlist, do not add a wildcard entry, such as `*.quay.io`, to your denylist. In most cases, image registries use a content delivery network (CDN) to serve images. If a firewall blocks access, then image downloads are denied when the initial download request is redirected to a host name such as `cdn01.quay.io`.
4343
+
44-
CDN host names, such as `cdn01.quay.io` are covered when you add a wildcard entry such as `*.quay.io` in your allowlist.
44+
CDN host names, such as `cdn01.quay.io`, are covered when you add a wildcard entry, such as `*.quay.io`, in your allowlist.
4545

4646
. Allowlist any site that provides resources for a language or framework that your builds require.
4747

0 commit comments

Comments
 (0)