Merge pull request #37792 from kelbrown20/additional-url-needed-in-firewall-1942662

BZ:1942662 - Adding firewall URL sections to point 5 instead of 4

Author: lpettyjo

modules/configuring-firewall.adoc

@@ -74,15 +74,11 @@ CDN hostnames, such as `cdn01.quay.io`, are covered when you add a wildcard entr
 |===
 |Cloud |URL | Port |Function
 
-.2+|AWS
+|AWS
 |`*.amazonaws.com`
 |443, 80
 |Required to access AWS services and resources. Review the link:https://docs.aws.amazon.com/general/latest/gr/rande.html[AWS Service Endpoints] in the AWS documentation to determine the exact endpoints to allow for the regions that you use.
 
-|`oso-rhc4tp-docker-registry.s3-us-west-2.amazonaws.com`
-|443, 80
-|Required to access AWS services and resources when using strict security requirements. Review the link:https://docs.aws.amazon.com/general/latest/gr/rande.html[AWS Service Endpoints] in the AWS documentation to determine the exact endpoints to allow for the regions that you use.
-
 .2+|GCP
 |`*.googleapis.com`
 |443, 80
@@ -145,7 +141,6 @@ CDN hostnames, such as `cdn01.quay.io`, are covered when you add a wildcard entr
 |443, 80
 |Required for `odo` CLI.
 |===
-+
 Operators require route access to perform health checks. Specifically, the
 authentication and web console Operators connect to two routes to verify that
 the routes work. If you are the cluster administrator and do not want to allow
@@ -156,6 +151,21 @@ the routes work. If you are the cluster administrator and do not want to allow
 that is specified in the `spec.route.hostname` field of the
 `consoles.operator/cluster` object if the field is not empty.
 
+. Allowlist the following URLs for optional third-party content:
++
+[cols="3,2,4",options="header"]
+|===
+|URL | Port | Function
+
+|`registry.connect.redhat.com`
+|443, 80
+|Required for all third-party images and certified operators.
+
+|`oso-rhc4tp-docker-registry.s3-us-west-2.amazonaws.com`
+|443, 80
+|Required for Sonatype Nexus, F5 Big IP operators.
+|===
++
 . If you use a default Red Hat Network Time Protocol (NTP) server allow the following URLs:
 * `1.rhel.pool.ntp.org`
 * `2.rhel.pool.ntp.org`