Might be worth mentioning the specific domains that would need access through a proxy, which we found to be:
Also, MicroK8s defaults to using Google’s DNS servers, so if you don’t allow access to those you should run microk8s enable dns:${ip-of-dns-server}.