Air-Gapped Environments

This guide demonstrates how to download and package the Immuta Enterprise Helm chart and its dependencies for consumption on a separate network with no internet access.

Prerequisite

Checklist

Skopeo

Helm

Download artifacts

This section demonstrates how to download the Helm chart and container images to your local machine. These artifacts will be packaged and transferred to the air-gapped environment later.

  1. Create a directory named offline-kit.

    mkdir ./offline-kit
  2. Download the Helm chart into directory offline-kit.

    helm pull oci://ocir.immuta.com/stable/immuta-enterprise --destination ./offline-kit --version 2024.3.7
  3. Extract file DIGESTS.md from the Helm chart archive.

    tar --extract --gzip --strip-components=1 --directory=./offline-kit --file=./immuta-enterprise-*.tgz immuta-enterprise/DIGESTS.md
  4. Open file ./offline-kit/DIGESTS.md. This file includes the name and digest of every container image referenced by the Helm chart.

  5. Download each image listed in file DIGESTS.md using skopeo. Each image will be saved to directory offline-kit with the filename<name>-<tag>.tar.

    read -r -p "Enter the container image to download (e.g., docker.io/hello-world:latest):" image && \
    skopeo copy docker://"$image" docker-archive:"offline-kit/$(sed 's#.*/##; s#:#-#g' <<< "$image").tar"

Transfer artifacts

This section demonstrates how to push the previously archived container images to a private registry that's accessible from within your air-gapped environment.

  1. Transfer directory offline-kit (created in the previous section) onto a machine that's within your air-gapped environment.

  2. Push each image to your private registry using skopeo.

    skopeo copy docker-archive:offline-kit/<name>-<tag>.tar docker://<private-registry-fqdn>/immuta/<name>:<tag>

Chart installation

Edit the immuta-values.yaml to reference the private container registry and images.

Last updated

Was this helpful?