As noted on wikitech, apps and services running in Wikimedia production need to go through a proxy to make HTTP requests to the outside world.
Since we are using service-runner, we can use the standard app configuration proxy setting for this:
services:
- name: push-notifications
module: ./dist/app.js
conf:
port: 8900
proxy:
host: url-downloader.eqiad.wikimedia.org
port: 8080
protocol: http
[...]This setting should be added to the production service configurations provided on a per-DC basis under the helmfile.d directory in operations/deployment-charts.