Go automatically parses basic auth credentials from HTTP_PROXY and http.DefaultClient configures http.ProxyFromEnvironment by default. So we just need to ensure we're registering any/all custom CA certs with their HTTP transports.

What HTTP clients are we talking about?

• Sink HTTP clients (Alertmanager, Slack)
• Helm chart install and/or pull from OCI
  • For Helm, adding the basic auth to HTTP_PROXY / HTTPS_PROXY should work, per the following links:
    • Setup proxy for helm install charts helm/helm#10065 (comment)
    • https://pkg.go.dev/net/http#ProxyFromEnvironment
    • https://go-review.googlesource.com/c/go/+/512555

Related:

• 🌱 Proxy with basic authentication validator-plugin-network#108
• 🌱 Proxy with basic authentication validator-plugin-oci#65