This is the Experimental version (Latest). It is under active development and may change. For the most reliable documentation, use the version selector in the top-right to switch to Stable, or click here to go to the Stable version's homepage.
Notes on Installing in Air-gapped Environment
Last updated:
This guide ONLY provides brief instructions/ideas for installing Opstella and dependencies in an air-gapped environment (without direct internet access).
Kubernetes Clusters
Section titled “Kubernetes Clusters”Please follow to the instructions from your Kubernetes Provider.
Opstella Dependencies (DevSecOps Tools/Observability Tools)
Section titled “Opstella Dependencies (DevSecOps Tools/Observability Tools)”Helm Charts
Section titled “Helm Charts”Store any Helm Charts in tarball files in the following directory. **
$HOME/opstella-installation/helm-charts/**.tgz
Container Images
Section titled “Container Images”In this case, you need to pull container images into .tar file into Bastion Host.
Opstella Software
Section titled “Opstella Software”Helm Charts
Section titled “Helm Charts”Store any Helm Charts in tarball files in the following directory. **
$HOME/opstella-installation/helm-charts/**.tgz
Gather Opstella System Helm Chart
Section titled “Gather Opstella System Helm Chart”Download the required Helm Charts as advised by the Installation Team.
Pull directly from Release Channel Registry and save to $HOME/opstella-installation/helm-charts/opstella-system.tar.gz
Container Images
Section titled “Container Images”In this case, you need to pull container images into .tar file into Bastion Host.
Other necessary files
Section titled “Other necessary files”In an air-gapped environment, some components or plugins (such as .jar files for SonarQube) need to be downloaded from the internet during the installation process by the Kubernetes pods themselves.
Since these pods cannot reach the internet, you MUST provide an Internal HTTP Static File Server to host these files.
Common software for this purpose includes:
- NGINX
- Apache HTTP Server
- Caddy
- Object Storage (MinIO, SeaweedFS, etc.)
Ensure that all necessary files are downloaded, uploaded to this server, and are accessible via HTTP/HTTPS URL from within the Kubernetes clusters.
Finished?
Use the below navigation to proceed