Configure Cluster for Airgap

If the portable device was used instead of the bastion server, carry the device to the air-gapped environment with the target OpenShift cluster, and make sure it has connection to the cluster.

This step does the following:

  • Creates a global image pull Secret for the target registry (skipped if target registry is unauthenticated).
  • Creates an ImageSourceContentPolicy object with mirror settings.
Warning: Cluster resources must adjust to the new pull secret, which can temporarily limit the usability of the cluster. Authorization credentials are stored under $HOME/.airgap/secrets and /tmp/airgap* to support this action.
Warning: Applying ImageSourceContentPolicy causes cluster nodes to recycle. Run the following command after replacing the <target_namespace> placeholder with the name of the target namespace for the helm chart, and after replacing the <target_registry> placeholder with the name of the target image registry.
cloudctl case launch                    \
    --case case/ibm-itx-rs              \
    --namespace <target_namespace>      \
    --inventory itxRsProd               \
    --action ConfigureClusterAirgap     \
    --args "--registry <target_registry> --inputDir /tmp/cases"