ISV-3470: use proxy_pass variable to force regular address resolution… (#441)

* ISV-3470: use proxy_pass variable to force regular address resolution (to prevent mismatched upstream address)

* ISV-3470: use nameserver qualified name instead of ip address

---------

Co-authored-by: John Bell <[email protected]>

Author: johnbe11

ansible/inventory/group_vars/operator-pipeline.yml

@@ -58,5 +58,6 @@ community_signing_pipeline_url: "{{ community_signing_pipeline_name }}-tekton-{{
 nginx_basic_user_file_local_path: ../../vaults/common/htpasswd-nonprod
 nginx_proxy_service_url: "https://{{ community_signing_pipeline_url }}"
 nginx_proxy_url: "{{ community_signing_pipeline_name }}-{{ env }}.apps.pipelines-stage.0ce8.p1.openshiftapps.com"
+nginx_nameserver_ip: "dns-default.openshift-dns.svc.cluster.local"
 
 signing_pub_key_local_path: ../../vaults/{{ env }}/sig-key.pub

ansible/roles/nginx-proxy/templates/openshift/nginx-configuration.yml

@@ -40,7 +40,9 @@ data:
           location / {
               auth_basic "Community signing pipeline";
               auth_basic_user_file {{ nginx_basic_user_file_path }};
-              proxy_pass {{ nginx_proxy_service_url }};
+              resolver {{ nginx_nameserver_ip }};
+              set $backend {{ nginx_proxy_service_url }};
+              proxy_pass $backend;
           }
       }
     }