This is the Stable version of the documentation. The latest version is experimental and under active development. You can use the version selector in the top-right menu to switch versions for this specific page, or click here to go to the latest version's homepage.
Notes on Installing in Air-gapped Environment
This guide ONLY provides brief instructions/ideas for installing Opstella and dependencies in an air-gapped environment (without direct internet access).
Kubernetes Clusters
Section titled “Kubernetes Clusters”Please follow to the instructions from your Kubernetes Provider.
Opstella Dependencies (DevSecOps Tools/Observability Tools)
Section titled “Opstella Dependencies (DevSecOps Tools/Observability Tools)”Helm Charts
Section titled “Helm Charts”Store any Helm Charts in tarball files in the following directory. **
$HOME/opstella-installation/helm-charts/**.tgz
Container Images
Section titled “Container Images”In this case, you need to pull container images into .tar file into Bastion Host.
Opstella Software
Section titled “Opstella Software”Helm Charts
Section titled “Helm Charts”Store any Helm Charts in tarball files in the following directory. **
$HOME/opstella-installation/helm-charts/**.tgz
Gather Opstella System Helm Chart
Section titled “Gather Opstella System Helm Chart”Download the required Helm Charts as advised by the Installation Team.
Pull directly from Release Channel Registry and save to $HOME/opstella-installation/helm-charts/opstella-system.tar.gz
Container Images
Section titled “Container Images”In this case, you need to pull container images into .tar file into Bastion Host.
Other necessary files
Section titled “Other necessary files”In an air-gapped environment, some components or plugins (such as .jar files for SonarQube) need to be downloaded from the internet during the installation process by the Kubernetes pods themselves.
Since these pods cannot reach the internet, you MUST provide an Internal HTTP Static File Server to host these files.
Common software for this purpose includes:
- NGINX
- Apache HTTP Server
- Caddy
- Object Storage (MinIO, SeaweedFS, etc.)
Ensure that all necessary files are downloaded, uploaded to this server, and are accessible via HTTP/HTTPS URL from within the Kubernetes clusters.
Finished?
Use the below navigation to proceed