Configuring a proxy server

In version 1.2, Kaspersky Container Security can proxy requests from private corporate networks to the external environment. The settings for connection through a proxy server are configured using the following environment variables in the Helm Chart package, which is included in the solution distribution kit:

HTTP_PROXY – proxy server for HTTP requests.
HTTPS_PROXY – proxy server for HTTPS requests.
NO_PROXY – a variable that specifies domains or domain masks to be excluded from proxying.
If HTTP_PROXY or HTTPS_PROXY is used, the NO_PROXY variable is automatically generated in the Helm Chart package, and all the components used by Kaspersky Container Security are indicated in this variable.

You can change the NO_PROXY variable if you need to specify domains and masks for operation of Kaspersky Container Security in order to exclude them from proxying.
SCANNER_PROXY – a specialized variable that specifies which proxy server receives requests from the scanner of the File Threat Protection component. These requests are used by Kaspersky servers to update databases.
LICENSE_PROXY – a specialized variable that specifies the proxy server through which kcs-licenses module sends requests to Kaspersky servers to check and update information about the current license.

To specify Kaspersky servers in the permission lists of proxy servers, you must use a *.kaspersky.com or .kaspersky.com mask (depending on the domain name masks supported by your proxy server).

The table below lists the Kaspersky Container Security components that can use environment variables, and also indicates the purpose of these environment variables.

Environment variables used by Kaspersky Container Security components

Component	Environment variable	Purpose
kcs-ih	`HTTP_PROXY` `HTTPS_PROXY` `NO_PROXY`	Getting access to external image registries that are not available from the Kaspersky Container Security namespace.
kcs-ih	`SCANNER_PROXY`	Update of the databases of the File Threat Protection scanner using Kaspersky update servers.
kcs-middleware	`HTTP_PROXY` `HTTPS_PROXY` `NO_PROXY`	Getting access to external image registries that are not available from the Kaspersky namespace.
kcs-scanner	`SCANNER_PROXY`	Update of the vulnerability scanner databases using Kaspersky update servers.
kcs-licenses	`LICENSE_PROXY`	Check and update of information about the current license using Kaspersky license servers.

Page top