Veritas InfoScale™ for Kubernetes Environments 8.0.100 - Linux

• Authenticate your local registry and registry.redhat.io.

  podman login registry.redhat.io
  podman login ${LOCAL_REGISTRY}

• To mirror nfd operator only, run the following command to prune the source index

  opm index prune \
  -f registry.redhat.io/redhat/redhat-operator-index
  :${VTAG} \
  		-p nfd -t ${LOCAL_REGISTRY}/catalog/redhat-operator:${VTAG}
  

• Run the following command to push the operator index images to your local registry.

  podman push ${LOCAL_REGISTRY}/catalog/redhat-operator:${VTAG}

• Run the following command to mirror the operators.

  mkdir ~/mirror-operator
  cd ~/mirror-operator
  oc adm catalog mirror --index-filter-by-os=${ARCHITECTURE} \
  		-a ${REG_CREDS} ${LOCAL_REGISTRY}/catalog/redhat-operator:
     ${VTAG} 		${LOCAL_REGISTRY}/operators
  

• Run the following command to push the operator index images to your local registry.

  	podman push ${LOCAL_REGISTRY}/catalog/redhat-operator:${VTAG}

• Run the following command to mirror the operators.

  oc adm catalog mirror --index-filter-by-os=${ARCHITECTURE} \
  		-a ${REG_CREDS} ${LOCAL_REGISTRY}/catalog/redhat-operator:${VTAG} \
  		${LOCAL_REGISTRY}/operators

• Inspect the manifests directory that is generated in your current directory. The manifest directory format is

  manifests-<index_image_name>-<random_number>

• Run the following command to customize mapping.txt with the local pull secret.

  oc image mirror -f \
  <path to manifest directory>/mapping.txt -a \
                          ${REG_CREDS}

• Copy manifests directories from mirror host to bastion node.

  scp -r <IP address of the mirror node>:~/mirror ~/ 

• Disable the sources for the default catalogs by adding disableAllDefaultSources: true to the OperatorHub object.

  	oc patch OperatorHub cluster --type json \
  		-p '[{"op": "add", "path": "/spec/disableAllDefaultSources", 
                                                "value": true}]'
  

• Apply imageContentSourcePolicy.yaml.

  cd ~/mirror/
  oc create -f manifests-redhat-operator-*/
                      imageContentSourcePolicy.yaml
  

• Apply catalogSource.yaml.

  oc create -f manifests-redhat-operator-*/catalogSource.yaml
  

• Verify whether the following resources are created successfully.

  oc get catalogsource -n openshift-marketplace
  oc get pods -n openshift-marketplace
  oc get packagemanifest -n openshift-marketplace
  	
  # Wait For READY State:
  # Example: operator name:- redhat-operator-catalog
  oc get catsrc <operator name> \
  		-n openshift-marketplace -ojsonpath=
          "{.status.connectionState.lastObservedState}"
  

• quay.io/jetstack/cert-manager-cainjector:v1.7.1

• quay.io/jetstack/cert-manager-controller:v1.7.1

• quay.io/jetstack/cert-manager-webhook:v1.7.1

• registry.redhat.io/openshift4/ose-kube-rbac-proxy

• registry.redhat.io/openshift4/special-resource-rhel8-operator:<vTAG> where, vTAG=v4.10.0-202206171549.p0.g034862e.assembly.stream or v4.9.0

• registry.connect.redhat.com/veritas-technologies/infoscale-sds-operator:8.0.100-rhel8

• registry.connect.redhat.com/veritas-technologies/infoscale-licensing-operator:8.0.100-rhel8

• registry.connect.redhat.com/veritas-technologies/infoscale-sds:8.0.100-$OS_VER-$KERNEL

• registry.connect.redhat.com/veritas-technologies/infoscale-csi:2.0.100-rhel8 registry.connect.redhat.com/veritas-technologies/infoscale-fencing:2.0.100-rhel8

• registry.redhat.io/openshift4/ose-csi-external-provisioner-rhel8:v4.7

• registry.redhat.io/openshift4/ose-csi-external-attacher:v4.7

• registry.redhat.io/openshift4/ose-csi-external-resizer-rhel8:v4.7

• registry.redhat.io/openshift4/ose-csi-external-snapshotter-rhel8:v4.7

• registry.redhat.io/openshift4/ose-csi-driver-registrar:v4.3

• ghcr.io/kvaps/kube-fencing-controller:v2.3.0

• ghcr.io/kvaps/kube-fencing-switcher:v2.3.0

To copy images to ${LOCAL_REGISTRY}

• If mirror host is connected to internet and ${LOCAL_REGISTRY} both, run the following commands on mirror host

  podman pull <src image>
  podman tag <src image> <tgt image>
  podman push <tgt image>
  
  #If csi images push fail, try push with '--remove-signatures'

• If mirror host is connected to internet only, run the following commands on the mirror host

  podman pull <src image>
  podman save -o <image_name>.tar <src image> <tgt image>
  -> Copy tar to ${LOCAL_REGISTRY} connected host (bastion node)

  Run the following commands on the bastion node.

  podman load -i <image_name>.tar
  podman tag <src image> <tgt image>
  podman push <tgt image>

• Download YAML_8.0.100.tar from the Veritas Download Centre.

• Extract YAML_8.0.100.tar . A folder YAML/OpenShift/air-gapped is created and all files required for installation are available in the folder.

• Update YAML/OpenShift/air-gapped/*.yaml with your ${LOCAL_REGISTRY}. Run the following commands.

  cd YAML/OpenShift/air-gapped-systems
  sed -i "s/192.168.1.21/${LOCAL_REGISTRY}/g" cert-manager.yaml
  sed -i "s/192.168.1.21/${LOCAL_REGISTRY}/g" iso.yaml
  sed -i "s/192.168.1.21/${LOCAL_REGISTRY}/g" lico.yaml
  sed -i "s/192.168.1.21/${LOCAL_REGISTRY}/g" cr.yaml