From feed3b26ae1b3e8801168907c1a1cb055887ce2a Mon Sep 17 00:00:00 2001 From: Dmytro Oboznyi Date: Mon, 7 Jun 2021 14:26:59 +0300 Subject: [PATCH] Add proxy envs to calico to make possible usage of AWS source destination check Signed-off-by: Dmytro Oboznyi --- .../networking.projectcalico.org/k8s-1.16.yaml.template | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/upup/models/cloudup/resources/addons/networking.projectcalico.org/k8s-1.16.yaml.template b/upup/models/cloudup/resources/addons/networking.projectcalico.org/k8s-1.16.yaml.template index 85ad6ea28f..499b46f048 100644 --- a/upup/models/cloudup/resources/addons/networking.projectcalico.org/k8s-1.16.yaml.template +++ b/upup/models/cloudup/resources/addons/networking.projectcalico.org/k8s-1.16.yaml.template @@ -3924,6 +3924,11 @@ spec: # Enable WireGuard encryption for all on-the-wire pod-to-pod traffic - name: FELIX_WIREGUARDENABLED value: "{{ .Networking.Calico.WireguardEnabled }}" + # Enable support for HTTP forward proxy + {{ range $name, $value := ProxyEnv }} + - name: {{ $name }} + value: {{ $value }} + {{ end }} securityContext: privileged: true resources: @@ -4130,4 +4135,3 @@ spec: --- # Source: calico/templates/configure-canal.yaml -