Notes on Installing in Air-gapped Environment

This guide ONLY provides brief instructions/ideas for installing Opstella and dependencies in an air-gapped environment (without direct internet access).

Contact Support

For air-gapped installations, please contact the Opstella Installation Team for consultation and to obtain specific asset packages required for your environment.

Kubernetes Clusters

Please follow to the instructions from your Kubernetes Provider.

Opstella Dependencies (DevSecOps Tools/Observability Tools)

Helm Charts

Store any Helm Charts in tarball files in the following directory. **

$HOME/opstella-installation/helm-charts/**.tgz

Container Images

In this case, you need to pull container images into .tar file into Bastion Host.

Opstella Software

Helm Charts

Store any Helm Charts in tarball files in the following directory. **

$HOME/opstella-installation/helm-charts/**.tgz

Gather Opstella System Helm Chart

Download the required Helm Charts as advised by the Installation Team.

Pull directly from Release Channel Registry and save to $HOME/opstella-installation/helm-charts/opstella-system.tar.gz

Container Images

In this case, you need to pull container images into .tar file into Bastion Host.

Other necessary files

In an air-gapped environment, some components or plugins (such as .jar files for SonarQube) need to be downloaded from the internet during the installation process by the Kubernetes pods themselves.

Since these pods cannot reach the internet, you MUST provide an Internal HTTP Static File Server to host these files.

Common software for this purpose includes:

• NGINX
• Apache HTTP Server
• Caddy
• Object Storage (MinIO, SeaweedFS, etc.)

Ensure that all necessary files are downloaded, uploaded to this server, and are accessible via HTTP/HTTPS URL from within the Kubernetes clusters.