Skip to content

Commit

Permalink
fix: add HTTPS_PROXY/NO_PROXY to buildspec for registry.terraform.io …
Browse files Browse the repository at this point in the history
…access

registry.terraform.io is blocked directly inside CodeBuild (Census network).
Must route through http://proxy.tco.census.gov:3128.
NO_PROXY excludes AWS-internal endpoints (.amazonaws.com) from proxy.
  • Loading branch information
Your Name committed Apr 7, 2026
1 parent 5e50d7b commit 0ada33a
Showing 1 changed file with 5 additions and 0 deletions.
5 changes: 5 additions & 0 deletions buildspec.yml
Original file line number Diff line number Diff line change
Expand Up @@ -26,6 +26,11 @@ env:
# Disable TLS verification for Census GHE (Census CA cert not trusted by default)
GIT_SSL_NO_VERIFY: "true"
TF_CLI_ARGS: "-no-color"
# Census proxy — required for registry.terraform.io provider downloads
HTTPS_PROXY: "http://proxy.tco.census.gov:3128"
HTTP_PROXY: "http://proxy.tco.census.gov:3128"
# Exclude AWS-internal endpoints from the proxy
NO_PROXY: "169.254.169.254,169.254.170.2,s3.us-gov-west-1.amazonaws.com,s3.amazonaws.com,.amazonaws.com,.us-gov-west-1.amazonaws.com"

phases:
install:
Expand Down

0 comments on commit 0ada33a

Please sign in to comment.