{"action":"opened","issue":{"url":"https://api.github.com/repos/kubernetes/kubernetes/issues/25016","repository_url":"https://api.github.com/repos/kubernetes/kubernetes","labels_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/25016/labels{/name}","comments_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/25016/comments","events_url":"https://api.github.com/repos/kubernetes/kubernetes/issues/25016/events","html_url":"https://github.com/kubernetes/kubernetes/issues/25016","id":152049743,"number":25016,"title":"make-ca-cert.sh , easy-rsa download breaks when inside firewallproxy.","user":{"login":"jsfeutz","id":677177,"avatar_url":"https://avatars.githubusercontent.com/u/677177?v=3","gravatar_id":"","url":"https://api.github.com/users/jsfeutz","html_url":"https://github.com/jsfeutz","followers_url":"https://api.github.com/users/jsfeutz/followers","following_url":"https://api.github.com/users/jsfeutz/following{/other_user}","gists_url":"https://api.github.com/users/jsfeutz/gists{/gist_id}","starred_url":"https://api.github.com/users/jsfeutz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jsfeutz/subscriptions","organizations_url":"https://api.github.com/users/jsfeutz/orgs","repos_url":"https://api.github.com/users/jsfeutz/repos","events_url":"https://api.github.com/users/jsfeutz/events{/privacy}","received_events_url":"https://api.github.com/users/jsfeutz/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-04-30T20:00:38Z","updated_at":"2016-04-30T20:00:38Z","closed_at":null,"body":"Tried different http_proxy/https_proxy env settings in both docker, and passing to the script. The initial container sets correctly.. but the containers kicked off by the initial container do not set proxy correctly. So  apiserver container starts up complains about missing ca.crt. \r\n\r\n--> line in make-ca-cert.sh\r\ncurl -L -O http://storage.googleapis.com/kubernetes-release/easy-rsa/easy-rsa.tar.gz > /dev/null 2>&1\r\ntar xzf easy-rsa.tar.gz > /dev/null 2>&1\r\n\r\n\r\nside note--->\r\nFor those of behind a Corporate firewall, usually we are running a Private Registry or Proxying the public registries with artifactory or nexus. Simply creating ENV variables that we can set the image source and repo variables would be useful so we repoint the scripts to internal mirrors.\r\n\r\n*Read about Artifactory proxying\r\nK8S_REPO=gcr.io  (could change to myrepo.com/google_containers/hybercube-amd64:v1.2.3\r\nGAPI_REPO=storage.googleapis.com "}}