4. Delivering QKDLite in a air-gapped environment (Helm)

This guide describes how to deliver QKDLite chart and images onto a Kubernetes cluster in a airgap scenario.

4.1. Prerequisites

Ensure the following are available before installing:

  • A private OCI registry to upload charts and images

  • Credentials to QKDLite registry (qkdlite.azurecr.io)

  • QKDLite Installer package

4.2. Steps

Both procedures below are run from the QKDLite_helm directory. Install the OCI tooling once before running either step:

Listing 4.1  QKDLite main node
$ cd QKDLite_helm
$ ./install_oci_tooling.sh

4.2.1. Fetching updates

Run the bundling script in fetch mode to download the Helm chart and container images:

Listing 4.2  QKDLite main node
$ ./bundle_QKDLite_helm.sh fetch

This produces an archive named qkdlite-<version>-bundle.tar.gz in the current directory.

4.2.2. Pushing to a private registry

Run the bundling script in push mode, supplying the bundle archive and the target OCI registry:

Listing 4.3  QKDLite main node
$ ./bundle_QKDLite_helm.sh push -b qkdlite-<version>-bundle.tar.gz -t <registry-hostname>

Replace <version> with the bundle version and <registry-hostname> with the hostname of your private OCI registry.