From 0ada33a66266beca56f1580b7d7cfb8b94a2467c Mon Sep 17 00:00:00 2001 From: Your Name Date: Tue, 7 Apr 2026 12:40:02 -0400 Subject: [PATCH] fix: add HTTPS_PROXY/NO_PROXY to buildspec for registry.terraform.io access registry.terraform.io is blocked directly inside CodeBuild (Census network). Must route through http://proxy.tco.census.gov:3128. NO_PROXY excludes AWS-internal endpoints (.amazonaws.com) from proxy. --- buildspec.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/buildspec.yml b/buildspec.yml index 42ddba2..fc57156 100644 --- a/buildspec.yml +++ b/buildspec.yml @@ -26,6 +26,11 @@ env: # Disable TLS verification for Census GHE (Census CA cert not trusted by default) GIT_SSL_NO_VERIFY: "true" TF_CLI_ARGS: "-no-color" + # Census proxy — required for registry.terraform.io provider downloads + HTTPS_PROXY: "http://proxy.tco.census.gov:3128" + HTTP_PROXY: "http://proxy.tco.census.gov:3128" + # Exclude AWS-internal endpoints from the proxy + NO_PROXY: "169.254.169.254,169.254.170.2,s3.us-gov-west-1.amazonaws.com,s3.amazonaws.com,.amazonaws.com,.us-gov-west-1.amazonaws.com" phases: install: