Skip to content
Olivares AI docs

Install in an air-gapped environment

This deployment capability is distributed with Enterprise. See editions.

1. Build the bundle (online, once)

Section titled “1. Build the bundle (online, once)”

What the bundle contains

Section titled “What the bundle contains”

2. Verify and mirror inside the gap

Section titled “2. Verify and mirror inside the gap”

Verify every image offline (no transparency log)

Section titled “Verify every image offline (no transparency log)”

Verify the Helm chart offline

Section titled “Verify the Helm chart offline”

If a Helm-native .prov is present, additionally: helm verify chart/*.tgz

Section titled “If a Helm-native .prov is present, additionally: helm verify chart/*.tgz”

(needs the signer’s GPG public key in your keyring)

Section titled “(needs the signer’s GPG public key in your keyring)”

Mirror into your private registry by digest

Section titled “Mirror into your private registry by digest”

Install by digest, never by tag

Section titled “Install by digest, never by tag”

Nothing calls out inside the gap

Section titled “Nothing calls out inside the gap”

FIPS / STIG variants

Section titled “FIPS / STIG variants”

See also

Section titled “See also”