Kaspersky Container Security

Configuring a proxy server

December 4, 2024

ID 274394

In version 1.2, Kaspersky Container Security can proxy requests from private corporate networks to the external environment. The settings for connection through a proxy server are configured using the following environment variables in the Helm Chart package, which is included in the solution distribution kit:

  • HTTP_PROXY – proxy server for HTTP requests.
  • HTTPS_PROXY – proxy server for HTTPS requests.
  • NO_PROXY – a variable that specifies domains or domain masks to be excluded from proxying.

    If HTTP_PROXY or HTTPS_PROXY is used, the NO_PROXY variable is automatically generated in the Helm Chart package, and all the components used by Kaspersky Container Security are indicated in this variable.

    You can change the NO_PROXY variable if you need to specify domains and masks for operation of Kaspersky Container Security in order to exclude them from proxying.

  • SCANNER_PROXY – a specialized variable that specifies which proxy server receives requests from the scanner of the File Threat Protection component. These requests are used by Kaspersky servers to update databases.
  • LICENSE_PROXY – a specialized variable that specifies the proxy server through which kcs-licenses module sends requests to Kaspersky servers to check and update information about the current license.

To specify Kaspersky servers in the permission lists of proxy servers, you must use a *.kaspersky.com or .kaspersky.com mask (depending on the domain name masks supported by your proxy server).

The table below lists the Kaspersky Container Security components that can use environment variables, and also indicates the purpose of these environment variables.

Environment variables used by Kaspersky Container Security components

Component

Environment variable

Purpose

kcs-ih

HTTP_PROXY

HTTPS_PROXY

NO_PROXY

Getting access to external image registries that are not available from the Kaspersky Container Security namespace.

kcs-ih

SCANNER_PROXY

Update of the databases of the File Threat Protection scanner using Kaspersky update servers.

kcs-middleware

HTTP_PROXY

HTTPS_PROXY

NO_PROXY

Getting access to external image registries that are not available from the Kaspersky namespace.

kcs-scanner

SCANNER_PROXY

Update of the vulnerability scanner databases using Kaspersky update servers.

kcs-licenses

LICENSE_PROXY

Check and update of information about the current license using Kaspersky license servers.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.