Deploying TAP workload when needs to access external resource via HTTP proxy

Products

• VMware Tanzu Application Platform

Issue/Introduction

When deploying TAP workload, it might need to access external resource via HTTP proxy. For example, TAP might fail to clone source from a remote GitHub repository with error shown below.

$ tanzu apps workload get tanzu-java-web-app --namespace tap-java
📡 Overview
   name:        tanzu-java-web-app
   type:        web
   namespace:   tap-java

💾 Source
   type:     git
   url:      https://github.com/myrepo/tanzu-java-web-app
   branch:   main

📦 Supply Chain
   name:   source-test-to-url

   NAME               READY   HEALTHY   UPDATED   RESOURCE
   source-provider    False   False     7m20s     gitrepositories.source.toolkit.fluxcd.io/tanzu-java-web-app
   source-tester      False   Unknown   7m26s     not found
   image-provider     False   Unknown   7m26s     not found
   config-provider    False   Unknown   7m26s     not found
   app-config         False   Unknown   7m26s     not found
   service-bindings   False   Unknown   7m26s     not found
   api-descriptors    False   Unknown   7m26s     not found
   config-writer      False   Unknown   7m26s     not found

🚚 Delivery
   name:   delivery-basic

   NAME              READY   HEALTHY   UPDATED   RESOURCE
   source-provider   False   False     7m20s     imagerepositories.source.apps.tanzu.vmware.com/tanzu-java-web-app-delivery
   deployer          False   Unknown   7m23s     not found

💬 Messages
   Workload [HealthyConditionRule]:   failed to checkout and determine revision: unable to clone 'https://github.com/myrepo/tanzu-java-web-app': Get "https://github.com/myrepo/tanzu-java-web-app/info/refs?service=git-upload-pack": dial tcp: lookup github.com on #.#.#.#:53: server misbehaving
   Deliverable [HealthyConditionRule]:   Unable to resolve image with tag "my.registry.com/tap/tap-packages/tanzu-java-web-app-tap-java-bundle:01d0aa14-279a-46dd-b0a4-d4a9ab4718a3" to a digest: HEAD https://my.registry.com/v2/tap/tap-packages/tanzu-java-web-app-tap-java-bundle/manifests/01d0aa14-279a-46dd-b0a4-d4a9ab4718a3: unexpected status code 404 Not Found (HEAD responses have no body, use GET for details)

 

Environment

TAP installation which requires HTTP proxy for accessing external resources, e.g. github.com.

Cause

HTTP proxy settings are not configured properly in several components.

Resolution

Configure HTTP proxy for several components in tap-values.yaml file. 

buildservice

buildservice:
   http_proxy: "<proxy hostname or IP>:<port>"
   https_proxy: "<proxy hostname or IP>:<port>"
   no_proxy: "#.#.#.#/24,svc.cluster.local.,svc.cluster.local,.local,.local."

fluxcd_source_controller

fluxcd_source_controller:
   http_proxy: "<proxy hostname or IP>:<port>"
   https_proxy: "<proxy hostname or IP>:<port>"
   no_proxy: "#.#.#.#/24,svc.cluster.local.,svc.cluster.local,.local,.local."

Note: "svc.cluster.local.,svc.cluster.local,.local,.local." is required for no_proxy parameter for accessing internal resources on Kubernetes cluster.