Add egress proxy to user-app Kaniko build jobs.

Inject registry-egress-proxy into Kaniko and network init containers so npm/apk/composer/pip/git clone work on restricted egress clusters. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-09 18:07:48 +03:30
parent 3d773a4a62
commit 1ec4d07939
6 changed files with 62 additions and 6 deletions
@@ -150,6 +150,12 @@ export default () => ({
      alpine: (process.env.BUILD_ALPINE_IMAGE || 'registry.abrban.com/proxy-dockerhub/library/alpine:3.19').trim(),
      alpineGit: (process.env.BUILD_ALPINE_GIT_IMAGE || 'registry.abrban.com/proxy-dockerhub/alpine/git:2.43.0').trim(),
    },
+    /**
+     * Secret name with HTTP_PROXY / HTTPS_PROXY / NO_PROXY for build pods
+     * (Kaniko RUN steps: npm, apk, composer, pip; init containers: apk, git clone).
+     * Empty = disabled (clusters with direct egress).
+     */
+    egressProxySecret: (process.env.BUILD_EGRESS_PROXY_SECRET || '').trim(),
    /** Kaniko build container resources — tune for large images. */
    kaniko: {
      cpuRequest: process.env.KANIKO_CPU_REQUEST || '500m',