[kots]: add proxy server configuration

Author: Simon Emms

install/installer/scripts/kots-install.sh

@@ -76,6 +76,10 @@ yq e -i ".domain = \"${DOMAIN}\"" "${CONFIG_FILE}"
 yq e -i '.license.kind = "secret"' "${CONFIG_FILE}"
 yq e -i '.license.name = "gitpod-license"' "${CONFIG_FILE}"
 
+echo "Gitpod: Inject the HTTP_PROXY settings secret"
+yq e -i '.httpProxy.kind = "secret"' "${CONFIG_FILE}"
+yq e -i '.httpProxy.name = "http-proxy-settings"' "${CONFIG_FILE}"
+
 if [ "${OPEN_VSX_URL}" != "" ];
 then
     echo "Gitpod: Setting Open VSX Registry URL"

install/kots/manifests/gitpod-http-proxy-settings.yaml

@@ -0,0 +1,15 @@
+# Copyright (c) 2022 Gitpod GmbH. All rights reserved.
+# Licensed under the MIT License. See License-MIT.txt in the project root for license information.
+
+apiVersion: v1
+kind: Secret
+metadata:
+  name: http-proxy-settings
+  labels:
+    app: gitpod
+    component: gitpod-installer
+type: Opaque
+data:
+  httpProxy: repl{{ HTTPProxy | Base64Encode | quote }}
+  httpsProxy: repl{{ HTTPSProxy | Base64Encode | quote }}
+  noProxy: repl{{ printf "kotsadm,.%s,%s" (ConfigOption "domain") (NoProxy) | Base64Encode | quote }}

install/kots/manifests/gitpod-installer-job.yaml

@@ -39,7 +39,7 @@ spec:
       containers:
         - name: installer
           # This will normally be the release tag
-          image: "eu.gcr.io/gitpod-core-dev/build/installer:sje-move-kots-bash-script.28"
+          image: "eu.gcr.io/gitpod-core-dev/build/installer:sje-installer-proxy-config.23"
           volumeMounts:
             - mountPath: /config-patch
               name: config-patch

install/kots/manifests/kots-preflight.yaml

@@ -77,6 +77,13 @@ spec:
           - |
             CONNECTION="error"
 
+            export http_proxy="{{repl HTTPProxy }}"
+            export HTTP_PROXY="{{repl HTTPProxy }}"
+            export https_proxy="{{repl HTTPSProxy }}"
+            export HTTPS_PROXY="{{repl HTTPSProxy }}"
+            export no_proxy="{{repl NoProxy }}"
+            export NO_PROXY="{{repl NoProxy }}"
+
             if [ '{{repl HasLocalRegistry }}' = "true" ];
             then
               # Don't test for airgapped