Prerequisites
Network access
EDB's container registries are delivered through the AWS CloudFront content delivery network (CDN). To pull images and packages reliably, systems in your environment must be able to make outbound HTTPS (port 443) connections to CloudFront. If your network restricts outbound traffic, allow the CloudFront IP ranges in your firewall.
AWS updates these IP ranges dynamically. To fetch the current list:
curl -s https://ip-ranges.amazonaws.com/ip-ranges.json | jq -r '.prefixes[] | select(.service == "CLOUDFRONT") | .ip_prefix' | sort -n
Because the ranges change over time, review them periodically and update your firewall rules accordingly — for example, by running this command on a schedule, or by subscribing to AWS IP address range notifications so you're alerted when the ranges change.
EDB Postgres AI Hybrid Manager
EDB Postgres® AI for CloudNativePG™ Cluster
See the Installation and upgrades or Red Hat OpenShift topics as appropriate.
EDB Postgres® AI for CloudNativePG™ Global Cluster
See the Installation and upgrade or Red Hat OpenShift topics as appropriate.