Skip to content

update allowed urls in nexus#4899

Open
JC-wk wants to merge 4 commits intomicrosoft:mainfrom
JC-wk:4895-nexus-docker-fqdn
Open

update allowed urls in nexus#4899
JC-wk wants to merge 4 commits intomicrosoft:mainfrom
JC-wk:4895-nexus-docker-fqdn

Conversation

@JC-wk
Copy link
Copy Markdown
Collaborator

@JC-wk JC-wk commented Apr 27, 2026

Resolves #4895 #4896

What is being addressed

Fixes an error where letsencrypt urls are not reachable leading to certs not being downloaded
Fixes and error where docker images are not reachable from nexus

How is this addressed

  • Add docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.com to nexus_allowed_fqdns
  • Change lencr.org urls to wildcards *.o.lencr.org,*.c.lencr.org,*.i.lencr.org in workspace_vm_allowed_fqdns
  • Update CHANGELOG.md
  • Increment template version to 3.7.9

@JC-wk JC-wk requested a review from a team as a code owner April 27, 2026 13:23
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 27, 2026

Unit Test Results

0 tests   0 ✅  0s ⏱️
0 suites  0 💤
0 files    0 ❌

Results for commit 397c391.

♻️ This comment has been updated with latest results.

@JC-wk JC-wk marked this pull request as draft April 28, 2026 08:10
core_vnet = "vnet-${var.tre_id}"
core_resource_group_name = "rg-${var.tre_id}"
nexus_allowed_fqdns = "pypi.org,*.pypi.org,files.pythonhosted.org,security.ubuntu.com,archive.ubuntu.com,keyserver.ubuntu.com,repo.anaconda.com,*.docker.com,*.docker.io,conda.anaconda.org,azure.archive.ubuntu.com,packages.microsoft.com,repo.almalinux.org,download-ib01.fedoraproject.org,cran.r-project.org,cloud.r-project.org,download1.rstudio.org,*.snapcraftcontent.com,download.microsoft.com,marketplace.visualstudio.com"
nexus_allowed_fqdns = "pypi.org,*.pypi.org,files.pythonhosted.org,security.ubuntu.com,archive.ubuntu.com,keyserver.ubuntu.com,repo.anaconda.com,*.docker.com,*.docker.io,conda.anaconda.org,azure.archive.ubuntu.com,packages.microsoft.com,repo.almalinux.org,download-ib01.fedoraproject.org,cran.r-project.org,cloud.r-project.org,download1.rstudio.org,*.snapcraftcontent.com,download.microsoft.com,marketplace.visualstudio.com,docker-images-prod.6aa30f8b08e16409b46e0173d6de2f56.r2.cloudflarestorage.com"
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Is that Cloudflare URL fixed for the Nexus image?

Copy link
Copy Markdown
Collaborator Author

@JC-wk JC-wk Apr 28, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yes, it's for nexus to access Docker Images
https://docs.docker.com/desktop/setup/allow-list/

@JC-wk JC-wk marked this pull request as ready for review April 28, 2026 15:02
Copy link
Copy Markdown
Member

@marrobi marrobi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If tested, LGTM.

@JC-wk
Copy link
Copy Markdown
Collaborator Author

JC-wk commented May 1, 2026

Can you test @TonyWildish-BH please?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Cannot pull Docker images, and updating Nexus whitelist is not enough to change firewall rules

3 participants