Search…
2.10.X
Air-Gapped Install - Upstream Kubernetes
This page describes the instructions for deploying TrilioVault for Kubernetes (TVK) in a network-restricted environment for Upstream or any Upstream-compatible Kubernetes distribution.
The following documentation provides a method to install Triliovault for Kubernetes inside an air-gapped network (dark site network); i.e. one that has either no internet or just partial internet network to run the installation.
Installation script requires GNU-based getopt package and iproute2mac package to run on a macOS.

Installation

Perform the following steps to download and install the files required:
  1. 1.
    Download the installation package here: - https://storage.googleapis.com/triliovault-airgap/<version>/installer.tar.gz
  2. 2.
    Untar the installer using command: tar -xvzf installer.tar.gz
  3. 3.
    Check that the extracted code looks like this:
tree installer
installer
├── README.md
├── certs
│ ├── fullchain.pem
│ └── privkey.pem
├── containerImages
│ ├── alpine.tar.gz
│ ├── registry.tar.gz
│ └── trilioImages.tar.gz
├── helm
├── k8s-triliovault-operator-2.9.0.tgz
└── run.sh
2 directories, 9 files
4. The next step is to set up a container registry with Trilio images. There are four options in total - two options for creating a new registry and two options for using an existing registry:
Creating a new registry:
Create registry (default)
Create registry with User Provided Certificates
This is the simplest method of setting up a container registry with Trilio images. The following command creates a local secure private container registry setup with WildCart certificates. (Not recommended for production use).
bash installer/run.sh --setup
The following command creates a local secure private container registry setup with user provided certificates. (Not recommended for production use) :
bash installer/run.sh --setup --registry-host <registry-hostname> --cert-file <path-to-cert-file> --key-file <path-to-key-file>
Using an existing registry:
Existing registry (no authentication)
Existing registry (with authentication)
This command enables you to use an existing container registry for Trilio images, where authentication is not required:
bash installer/run.sh --setup --registry <registry-name>
This command enables you to use an existing container registry for Trilio images, where authentication is required:
bash installer/run.sh --setup --registry <registry-name> --user <registry-username> --pass <registry-pass>
Container registry parameters

Upgrade TVK

Perform the following steps to download and install the upgrade files required:
  1. 1.
    Download newer version's installer package from GCS bucket here: - https://storage.googleapis.com/triliovault-airgap/<version>/installer.tar.gz
  2. 2.
    Repeat steps 2-4 from Installation section above.
  3. 3.
    Run helm upgrade using the following command:
helm upgrade --install <release-name> <k8s-triliovault-operator-*.tgz> --set registry=<registry-name>
Copy link
Outline
Installation
Upgrade TVK