Configuring the Unified Agent to communicate through a proxy

If your firewall rules do not allow transparent outbound HTTPS connections to external hosts, you can configure the Unified Agent to send traffic to a proxy by editing the Unified Agent configmap.

The forward proxy must be able to resolve the hostname of the IBM Cloud Pak for Multicloud Management ingress.

If you use a reverse proxy, you need to use the Ingress URL in the configuration, and the Unified Agent must have the IP address of the proxy in the icam-ua CR file.

Configuring the forward proxy

1. Edit the icam-ua CR file by running the following command:

   kubectl edit ua ua-icam
   

2. Search for http_proxy to navigate to the place where the following line is located:

   http_proxy = ""
   

3. Add the host and port information into proxy address. For example:

   http_proxy = "http://HostA:8091"
   

4. Save the CR.

Configuring the reverse proxy

1. Edit the icam-ua CR file by running the following command:

   kubectl edit ua ua-icam
   

2. Search for apm_server_ingress_urls to navigate to the place where the following line is located:

   apm_server_ingress_urls = ["$IBM_APM_SERVER_INGRESS_URL"] # required
   

3. Add the ingress url into proxy address.
4. Save the CR.