Reference

Add Astro domains to your network

To use Astro in a network that requires you to allowlist new domains, make a request to allowlist the following domains on your network:

  • https://cloud.astronomer.io/ - Astro Cloud Hosted service, so your users can access the Astro UI to manage your Astro and Airflow infrastructure.
  • https://api.astronomer.io/ - Astro API, so you can programmatically manage your Astro and Airflow infrastructure.
  • https://images.astronomer.cloud/ - Only required for Airflow 3 and Remote Execution. Remote Execution Agent pulls images from this domain.
  • https://auth.astronomer.io/ - Domain needed for authenticating requests to login to the Astro Cloud Hosted service.
  • https://updates.astronomer.io/ - Domain used to check for new versions of Astro Runtime images. Astro alerts you to new Runtime versions in Airflow Deployments’ UIs.
  • https://install.astronomer.io/ - Domain needed to install the Astro CLI, which is used for deploying project images to Astro.
  • https://*.astronomer.run/ (Recommended) - URLs for your individual Airflow Deployments in Astro. Allowlist needed so your users can connect to them to manage workflows.
  • https://<organization-short-name>.astronomer.run/ - Only required if you don’t use the recommended wildcard hostname, https://*.astronomer.run/. Individual Deployment URL for your Organization, used instead of wildcard.
  • https://<clusterId>.registry.astronomer.run/ - Only required if you don’t use the recommended wildcard hostname, https://*.astronomer.run/. Domain required to push images for your Airflow Deployments if you don’t use the wildcard hostname.
  • https://<clusterId>.external.astronomer.run/ - Only required for Remote Execution Deployments. These domains represent your Airflow Deployments’ orchestration plane. They must be allowlisted so your Remote Execution Agents can connect to them.

To locate the value for <organization-short-name> in the Astro UI, click Organization Settings. Copy the value listed under Organization Short Name. To locate the value for <clusterId> in the Astro UI, click Organization Settings, then click Clusters, and copy the ID value under each cluster’s details page.

To build and deploy Astro project images, additionally allowlist the following domains:

  • https://air.astronomer.io - Domain needed for accessing Astro Runtime images.
  • https://astrocrpublic.azurecr.io - Domain needed for accessing Astro Runtime images, in case a redirect from https://air.astronomer.io doesn’t work with your networking.
  • https://pip.astronomer.io - Domain needed for installing packages in images.
  • https://install.astronomer.io - Domain needed in order to install the Astro CLI, which is used for deploying project images to Astro.
  • https://raw.githubusercontent.com - Domain needed as an alternative way to access GitHub-hosted content.
  • https://pypi.org - Domain needed for installing Python packages in images.