Configuring a Proxy

If your network requires proxy settings to enable worker nodes to reach outside registries or repositories, for example, log in to each worker node in the cluster (see Creating an OKE Worker Node Pool) and perform the following procedure.

  1. Create a crio.service.d directory under /etc/systemd/system.

    sudo mkdir /etc/systemd/system/crio.service.d
  2. Create an http-proxy.conf file in /etc/systemd/system/crio.service.d and add proxy details.

    sudo cat /etc/systemd/system/crio.service.d/http-proxy.conf
    [Service]
    Environment="HTTP_PROXY=http://your_proxy.your_domain_name:your_port"
    Environment="HTTPS_PROXY=http://your_proxy.your_domain_name:your_port"
    Environment="no_proxy=localhost,127.0.0.1,your_domain_name,ocir.io,Kubernetes_cidr,pods_cidr"

    In the no_proxy entry, Kubernetes_cidr is the Kubernetes Service CIDR block that you enter when you create a cluster, and pods_cidr is the pods CIDR block that you enter when you create a cluster. See Creating an OKE Cluster.

  3. Reload the systemd manager configuration and crio.

    sudo systemctl daemon-reload
    sudo systemctl restart crio