Corporate Proxies - Sidero Documentation

Appending the certificate authority of MITM proxies

See Custom Certificate Authorities to append the CA certificate of your corporate proxy to the trusted store.

Configuring a machine to use the proxy

To configure Talos to use an HTTP or HTTPS proxy, set the appropriate environment variables with the EnvironmentConfig document:

apiVersion: v1alpha1
kind: EnvironmentConfig
variables:
  http_proxy: <http proxy>
  https_proxy: <https proxy>
  no_proxy: <no proxy>

In proxy-restricted environments, you may also need to configure DNS with ResolverConfig and NTP with TimeSyncConfig explicitly:

apiVersion: v1alpha1
kind: ResolverConfig
nameservers:
  - address: <ip 1>
  - address: <ip 2>
---
apiVersion: v1alpha1
kind: TimeSyncConfig
ntp:
  servers:
    - <server 1>
    - <server 2>

If proxy access is required before the machine configuration is applied (for example, during initial boot), provide the proxy settings via kernel command line arguments:

talos.environment=http_proxy=<http-proxy> talos.environment=https_proxy=<https-proxy>

⌘I