Correct configuration for cri-o proxy settings

[cpaggen]

Proxy for cri-o is found under /usr/lib/systemd/system/crio.service in the Environment variable, under [Service]. It appears values just need to be space-separated, like shown below.
Be careful that only one Environment statement can be declared. Default settings include Environment=GOTRACEBACK=crash without any quotes.

If the UI passes PROXY=on (or True), the fix should destroy that line and create a new one as shown below:

[Unit]
Description=Container Runtime Interface for OCI (CRI-O)
Documentation=https://github.com/cri-o/cri-o
Wants=network-online.target
Before=kubelet.service
After=network-online.target

[Service]
Type=notify
EnvironmentFile=-/etc/default/crio
Environment=HTTPS_PROXY=http://proxy.esl.cisco.com:80 NO_PROXY=localhost,192.168.0.0/16 GOTRACEBACK=crash
ExecStart=/usr/bin/crio
$CRIO_CONFIG_OPTIONS
$CRIO_RUNTIME_OPTIONS
$CRIO_STORAGE_OPTIONS
$CRIO_NETWORK_OPTIONS
$CRIO_METRICS_OPTIONS
ExecReload=/bin/kill -s HUP $MAINPID
TasksMax=infinity
LimitNOFILE=1048576
LimitNPROC=1048576
LimitCORE=infinity
OOMScoreAdjust=-999
TimeoutStartSec=0
Restart=on-abnormal

[Install]
WantedBy=multi-user.target
Alias=cri-o.service

[dsx1123]

Proxy env variables are set in file /etc/systemd/system/crio.service.d/http-proxy.conf
it appears it can be set multiple times:

cisco@nkt-master-1:~$ systemctl show cri-o  | grep proxy
Environment=GOTRACEBACK=crash HTTP_PROXY=http://proxy.esl.cisco.com:80 HTTPS_PROXY=http://proxy.esl.cisco.com:80 http_proxy=http://proxy.esl.cisco.com:80 https_proxy=http://proxy.esl.cisco.com:80 [unprintable] [unprintable]
DropInPaths=/etc/systemd/system/crio.service.d/http-proxy.conf

However, do find the crio proxy config task will be skipped when sandbox_status is set to false.

not sure if that's your issue.

[camrossi]

@cpaggen did you have time to check this one out?