Configure proxy bypass for container registries
Configure a proxy bypass for container image scans to reach specific internal or private registries that require a direct connection.
Before you begin
- Verify that you have at least version 1.30.2 of Discovery and Service Mapping Patterns.
- Verify that you have configured a proxy on the MID Server. For more information, see MID Server parameters.
Role required: discovery_admin
About this task
When a proxy is configured on the MID Server, all container image scanning goes through that proxy by default. If some internal or private registries aren't reachable through the proxy, use the sn_itom_pattern.container_image_scan_no_proxy system property to specify registries that the MID Server contacts directly.
Procedure
In the navigation filter, enter
sys_properties.list.In the Name column, search for
sn_itom_pattern.container_image_scan_no_proxy.Select the sn_itom_pattern.container_image_scan_no_proxy system property.
In the Value field, enter the hosts, domains, or IP ranges that bypass the proxy, separated by commas.
Examples:
- Hostname: internal.registry.mycompany.com
- Domains: internal.mycompany.com,.internal.mycompany.com
- IP ranges: 10.0.0.0/8,172.16.0.0/12
- Hostname, domain, and IP ranges combined: internal.registry.mycompany.com,internal.mycompany.com,.internal.mycompany.com,10.0.0.0/8,172.16.0.0/12 Note: To stop using the bypass, clear the values in this field.
Select Update.
What to do next
Scan the container images. For more information, see Scan container images.
Parent Topic:Container image scanning for software decomposition