feat: activate D601 sub2api external edge

scripts/src/platform-infra-sub2api-codex-sentinel.ts

@@ -80,6 +80,10 @@ export interface CodexPoolSentinelManifestOptions {
   serviceName: string;
   serviceDns: string;
   appSecretName: string;
+  proxy?: {
+    httpProxy: string;
+    noProxy: string;
+  } | null;
 }
 
 export function defaultCodexPoolSentinelConfig(): CodexPoolSentinelConfig {
@@ -317,6 +321,25 @@ export function renderCodexPoolSentinelManifest(
   const activeDeadlineSeconds = Math.max(300, Math.min(3600, config.probe.timeoutSeconds + 240));
   const command = sentinelContainerShellCommand(config);
   const runtimeImage = codexPoolSentinelRuntimeImage(config).runtimeImage;
+  const proxyEnv = options.proxy?.httpProxy
+    ? `                - name: HTTP_PROXY
+                  value: ${JSON.stringify(options.proxy.httpProxy)}
+                - name: HTTPS_PROXY
+                  value: ${JSON.stringify(options.proxy.httpProxy)}
+                - name: ALL_PROXY
+                  value: ${JSON.stringify(options.proxy.httpProxy)}
+                - name: http_proxy
+                  value: ${JSON.stringify(options.proxy.httpProxy)}
+                - name: https_proxy
+                  value: ${JSON.stringify(options.proxy.httpProxy)}
+                - name: all_proxy
+                  value: ${JSON.stringify(options.proxy.httpProxy)}
+                - name: NO_PROXY
+                  value: ${JSON.stringify(options.proxy.noProxy)}
+                - name: no_proxy
+                  value: ${JSON.stringify(options.proxy.noProxy)}
+`
+    : "";
   return `apiVersion: v1
 kind: Secret
 metadata:
@@ -446,6 +469,7 @@ spec:
                   valueFrom:
                     fieldRef:
                       fieldPath: metadata.namespace
+${proxyEnv}
               volumeMounts:
                 - name: sentinel-config
                   mountPath: /opt/sentinel