Repository navigation
feat: route outbound HTTPS through the ionic-platform egress resolver and proxy - #53
Merged
Merged
Conversation
… and proxy Points the server pods at this app's egress resolver (10.0.0.209) with dnsPolicy: None, mounts the symbol-server-egress-trust ConfigMap at /etc/egress-proxy and sets EXTRA_CA_CERTS to its ca.crt, which build_client adds to the bundled webpki roots. The allowed hosts and paths live only in electron/infra (egress_proxy, observe mode first). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01T66EoAUJ3zB8uLwRT79JV2
MarshallOfSound
approved these changes
Nov 2, 2026
MarshallOfSound
enabled auto-merge (squash)
November 2, 2026 21:59
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
VerteDinde
disabled auto-merge
November 3, 2026 02:24
VerteDinde
approved these changes
Nov 3, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Requested via Slack thread
Points the server pods at this app's ionic-platform egress resolver (
10.0.0.209) withdnsPolicy: None, mounts thesymbol-server-egress-trustConfigMap and setsEXTRA_CA_CERTSto its CA (whichbuild_clientadds to the bundled webpki roots, so nothing else loses trust), mirroring electron/secret-service#92; the allowed hosts and paths live only in electron/infra (egress_proxy, starting in observe mode). Tested locally: the release binary fetched a real 15.6 MB symbol file from artifacts.electronjs.org through an Envoy rendered from the infra config, and failed withUnknownIssuerwithoutEXTRA_CA_CERTS. This must not merge until the matching electron/infra change is applied.Generated by Claude Code