Reference

Add Astro domains to your network

To use Astro in a network that requires you to allowlist new domains, make a request to allowlist the following domains on your network:

  • https://cloud.astronomer.io/ - Astro Cloud Hosted service, so your users can access the Astro UI to manage your Astro and Airflow infrastructure.
  • https://api.astronomer.io/ - Astro API, so you can programmatically manage your Astro and Airflow infrastructure.
  • https://images.astronomer.cloud/ - Only required for Remote Execution. The Remote Execution Agent pulls images from this domain.
  • https://auth.astronomer.io/ - Domain needed for authenticating requests to login to the Astro Cloud Hosted service.
  • https://updates.astronomer.io/ - Domain used to check for new versions of Astro Runtime images. Astro alerts you to new Runtime versions in Airflow Deployments’ UIs.
  • https://install.astronomer.io/ - Domain needed to install the Astro CLI, which is used for deploying project images to Astro.
  • https://*.astronomer.run/ (Recommended) - URLs for your individual Airflow Deployments in Astro. Allowlist needed so your users can connect to them to manage workflows.
  • https://<organization-id>.astronomer.run/ - Only required if you don’t use the recommended wildcard hostname, https://*.astronomer.run/. Individual Deployment URL for your Organization, used instead of wildcard.
  • https://<clusterId>.registry.astronomer.run/ - Only required if you don’t use the recommended wildcard hostname, https://*.astronomer.run/. Domain required to push images for your Airflow Deployments if you don’t use the wildcard hostname.
  • https://<clusterId>.external.astronomer.run/ - Only required for Remote Execution Deployments. These domains represent your Airflow Deployments’ orchestration plane. They must be allowlisted so your Remote Execution Agents can connect to them.
  • https://o11y.astronomer.io - Astro OpenLineage URL endpoint required for integration with the Astro Observe and Alerts features.

To locate the value for <organization-id> in the Astro UI, click Settings (Organization Settings in the legacy UI). Copy the value listed under Organization ID. To locate the value for <clusterId> in the Astro UI, go to Settings > Clusters (in the legacy UI, go to Organization Settings > Clusters), and copy the ID value under each cluster’s details page.

To build and deploy Astro project images, additionally allowlist the following domains:

  • https://air.astronomer.io - Domain needed for accessing Astro Runtime images.
  • https://astrocrpublic.azurecr.io - Domain needed for accessing Astro Runtime images, in case a redirect from https://air.astronomer.io doesn’t work with your networking.
  • https://pip.astronomer.io - Domain needed for installing packages in images.
  • https://install.astronomer.io - Domain needed in order to install the Astro CLI, which is used for deploying project images to Astro.
  • https://raw.githubusercontent.com - Domain needed as an alternative way to access GitHub-hosted content.
  • https://pypi.org - Domain needed for installing Python packages in images.
  • https://astroproddagdeployment.blob.core.windows.net - Domain needed to upload Dag bundles to the Astronomer managed storage account.