|
1 | | -import FirewallOpenings from "../partials/install/_firewall-openings-kurl.mdx" |
2 | 1 | import FirewallOpeningsIntro from "../partials/install/_firewall-openings-intro.mdx" |
3 | 2 |
|
4 | 3 | # kURL Installation Requirements |
@@ -38,4 +37,37 @@ You must meet the additional kURL system requirements when applicable: |
38 | 37 |
|
39 | 38 | <FirewallOpeningsIntro/> |
40 | 39 |
|
41 | | -<FirewallOpenings/> |
| 40 | +<table> |
| 41 | + <tr> |
| 42 | + <th width="50%">Domain</th> |
| 43 | + <th>Description</th> |
| 44 | + </tr> |
| 45 | + <tr> |
| 46 | + <td>Docker Hub</td> |
| 47 | + <td><p>Some dependencies of KOTS are hosted as public images in Docker Hub. The required domains for this service are `index.docker.io`, `cdn.auth0.com`, `*.docker.io`, and `*.docker.com.`</p></td> |
| 48 | + </tr> |
| 49 | + <tr> |
| 50 | + <td>`proxy.replicated.com` *</td> |
| 51 | + <td><p>Private Docker images are proxied through `proxy.replicated.com`. This domain is owned by Replicated, Inc., which is headquartered in Los Angeles, CA.</p><p>For the range of IP addresses for `proxy.replicated.com`, see [replicatedhq/ips](https://github.com/replicatedhq/ips/blob/main/ip_addresses.json#L52-L57) in GitHub.</p></td> |
| 52 | + </tr> |
| 53 | + <tr> |
| 54 | + <td>`replicated.app`</td> |
| 55 | + <td><p>Upstream application YAML and metadata is pulled from `replicated.app`. The current running version of the application (if any), as well as a license ID and application ID to authenticate, are all sent to `replicated.app`. This domain is owned by Replicated, Inc., which is headquartered in Los Angeles, CA.</p><p>For the range of IP addresses for `replicated.app`, see [replicatedhq/ips](https://github.com/replicatedhq/ips/blob/main/ip_addresses.json#L60-L65) in GitHub.</p></td> |
| 56 | + </tr> |
| 57 | + <tr> |
| 58 | + <td>`registry.replicated.com` **</td> |
| 59 | + <td><p>Some applications host private images in the Replicated registry at this domain. The on-prem docker client uses a license ID to authenticate to `registry.replicated.com`. This domain is owned by Replicated, Inc which is headquartered in Los Angeles, CA.</p><p> For the range of IP addresses for `registry.replicated.com`, see [replicatedhq/ips](https://github.com/replicatedhq/ips/blob/main/ip_addresses.json#L20-L25) in GitHub.</p></td> |
| 60 | + </tr> |
| 61 | + <tr> |
| 62 | + <td><p>`k8s.kurl.sh`</p><p>`s3.kurl.sh`</p></td> |
| 63 | + <td><p>kURL installation scripts and artifacts are served from [kurl.sh](https://kurl.sh). An application identifier is sent in a URL path, and bash scripts and binary executables are served from kurl.sh. This domain is owned by Replicated, Inc., which is headquartered in Los Angeles, CA.</p><p> For the range of IP addresses for `k8s.kurl.sh`, see [replicatedhq/ips](https://github.com/replicatedhq/ips/blob/main/ip_addresses.json#L34-L39) in GitHub.</p><p> The range of IP addresses for `s3.kurl.sh` are the same as IP addresses for the `kurl.sh` domain. For the range of IP address for `kurl.sh`, see [replicatedhq/ips](https://github.com/replicatedhq/ips/blob/main/ip_addresses.json#L28-L31) in GitHub.</p></td> |
| 64 | + </tr> |
| 65 | + <tr> |
| 66 | + <td>`amazonaws.com`</td> |
| 67 | + <td>`tar.gz` packages are downloaded from Amazon S3 during installations with kURL. For information about dynamically scraping the IP ranges to allowlist for accessing these packages, see [AWS IP address ranges](https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html#aws-ip-download) in the AWS documentation.</td> |
| 68 | + </tr> |
| 69 | +</table> |
| 70 | + |
| 71 | +* Required only if the application uses the [Replicated proxy registry](/vendor/private-images-about). |
| 72 | + |
| 73 | +** Required only if the application uses the [Replicated registry](/vendor/private-images-replicated). |
0 commit comments