mbp-1038: Add documentation for installation in a disconnected enviroment - #175
mbp-1038: Add documentation for installation in a disconnected enviroment#175mlorenzofr wants to merge 1 commit into
Conversation
sabre1041
left a comment
sabre1041
left a comment
There was a problem hiding this comment.
This looks really good. Thanks @mlorenzofr for putting this integration together. One small comment related to the internal registry. Otherwise, once addressed, we can look to integrating this enhancement into the repository.
| oc create configmap internal-registry-ca -n openshift-config \ | ||
| --from-file=registry.internal.example.com=/etc/pki/ca-trust/source/anchors/example-ca.pem | ||
|
|
||
| oc patch image.config.openshift.io/cluster --type=merge \ |
There was a problem hiding this comment.
This is only needed when using the OpenShift internal registry. Might be good to denote this
There was a problem hiding this comment.
we also need to import the certificates if an internal PKI is being used to encrypt traffic in Git or OCI registry services, even if they are outside the OpenShift cluster.
I've added a little more information in this section to make it clearer.
87822d2 to
b29449e
Compare
p-rog
left a comment
p-rog
left a comment
There was a problem hiding this comment.
I just shared a few suggestions. In general it looks good to me.
…nment Signed-off-by: Manuel Lorenzo <mlorenzofr@redhat.com>
b29449e to
ce71765
Compare
3 participants
Add disconnected installation documentation and tooling for the Layered Zero Trust Validated Pattern.
docs/disconnected/README.mdcovering prerequisites, internal PKI trust, stagedoc mirrorv2 mirroring, Git mirroring, registry/Helm configuration, and pattern deployment viaPATTERN_DISCONNECTED_HOME.docs/disconnected/mirror/(releases, operators, images, unsigned) so mirroring can be run in smaller, retryable stages.scripts/gen-imageset-config.pyto generate mirror configs from a live ZTVP cluster (OCP version, operator subscriptions, workload images, and Validated Patterns Helm chart OCI artifacts).