This guide outlines the process for deploying an OpenShift Container Platform (OCP) in a disconnected environment. It utilizes a bastion server for secure communication and a private Quay repository hosted on a mirror server to manage container images.
- Quay Repository: A private repository that manages and stores your container images.
- Bastion Server: A server that facilitates secure interaction between your local network and the disconnected OCP environment.
- Mirror Server: Hosts the Quay repository and is part of the infrastructure that mirrors external resources needed for OpenShift installation.
- VPC Setup: Both the bastion and the mirror servers are located within the same Virtual Private Cloud (VPC), ensuring they can communicate securely.
- External Access: Both the bastion and the mirror servers are accessible thru SSH.
Follow these steps to set up your disconnected OpenShift Cluster:
-
Set Up the bastion and the mirror Server:
- The bastion server functions as a secure gateway linking your local network to the OpenShift cluster.
- The mirror server hosts the Quay repository and mirrors essential resources, providing them to the OpenShift environment.
Detailed instructions can be found here.
-
Set Up the Quay Repository:
- Configure the private Quay repository on the mirror server to manage OpenShift images.
Detailed instructions can be found here.
-
Install OpenShift:
- From the bastion server, install the OpenShift Container Platform using the resources available from your mirror server.
Detailed instructions can be found here.
-
Install Operators:
- Install OpenShift operators using the images managed in your Quay repository.
Detailed instructions can be found here
Link to Dell's example.
Each component plays a critical role in establishing a robust and secure OCP environment in disconnected setups. Proper configuration and integration of these components are essential for a successful deployment.
Note:
The oc-mirror-workspace
directory includes files generated by oc-mirror
.
config/imageSetConfig.yaml
: This file is used for configuringoc mirror
.config/install-config.yaml
: This file is used for configuringopenshift-install
.
Installing Operators in a Disconnected OpenShift Cluster:
Better securing the future: Navigating Red Hat OpenShift disconnected installations with the agent-based installer:
https://www.redhat.com/en/blog/red-hat-openshift-disconnected-installations
Red Hat-provided Operator catalogs
https://docs.openshift.com/container-platform/4.15/operators/understanding/olm-rh-catalogs.html