Comment 2 for bug 1931605

I've enabled access to esm.ubuntu.com, but there's a problem with contracts{,.staging}.canonical.com: it's on a K8s cluster with other services, and there's no way to differentiate at the firewall rule level, so IS isn't comfortable with me opening up access there as it stands. It'll need to have some kind of proxy put in front of it first.