diff --git a/_topic_map.yml b/_topic_map.yml index 7807552840..2cd988ed06 100644 --- a/_topic_map.yml +++ b/_topic_map.yml @@ -126,6 +126,8 @@ Topics: File: index - Name: Selecting an installation method and preparing a cluster File: installing-preparing +- Name: Mirroring images for a disconnected installation + File: installing-mirroring-installation-images - Name: Installing on AWS Dir: installing_aws Topics: @@ -340,8 +342,6 @@ Topics: Topics: - Name: Customizing nodes File: installing-customizing - - Name: Creating a mirror registry for a restricted network - File: installing-restricted-networks-preparations - Name: Configuring your firewall File: configuring-firewall - Name: Validating an installation diff --git a/cicd/pipelines/creating-applications-with-cicd-pipelines.adoc b/cicd/pipelines/creating-applications-with-cicd-pipelines.adoc index d18065e1f9..0b01103da0 100644 --- a/cicd/pipelines/creating-applications-with-cicd-pipelines.adoc +++ b/cicd/pipelines/creating-applications-with-cicd-pipelines.adoc @@ -45,7 +45,7 @@ include::modules/op-mirroring-images-to-run-pipelines-in-restricted-environment. * xref:../../openshift_images/configuring-samples-operator.adoc#samples-operator-restricted-network-install[Configuring Samples Operator for a restricted cluster] -* xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installation-about-mirror-registry_installing-restricted-networks-preparations[Creating a cluster with a mirrored registry] +* xref:../../installing/installing-mirroring-installation-images.adoc#installation-about-mirror-registry_installing-mirroring-installation-images[Creating a cluster with a mirrored registry] * xref:../../cli_reference/developer_cli_odo/using_odo_in_a_restricted_environment/creating-and-deploying-a-component-to-the-disconnected-cluster.adoc#mirroring-a-supported-builder-image_creating-and-deploying-a-component-to-the-disconnected-cluster[Mirroring a supported builder image] diff --git a/cicd/pipelines/installing-pipelines.adoc b/cicd/pipelines/installing-pipelines.adoc index 494d374444..45bd943171 100644 --- a/cicd/pipelines/installing-pipelines.adoc +++ b/cicd/pipelines/installing-pipelines.adoc @@ -47,6 +47,6 @@ include::modules/op-pipelines-operator-in-restricted-environment.adoc[leveloffse ** xref:../../openshift_images/configuring-samples-operator.adoc#samples-operator-restricted-network-install[Configuring Samples Operator for a restricted cluster] -** xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installation-about-mirror-registry_installing-restricted-networks-preparations[Creating a cluster with a mirrored registry] +** xref:../../installing/installing-mirroring-installation-images.adoc#installation-about-mirror-registry_installing-mirroring-installation-images[Creating a cluster with a mirrored registry] ** xref:../../cli_reference/developer_cli_odo/using_odo_in_a_restricted_environment/creating-and-deploying-a-component-to-the-disconnected-cluster.adoc#mirroring-a-supported-builder-image_creating-and-deploying-a-component-to-the-disconnected-cluster[Mirroring a supported builder image] diff --git a/cli_reference/developer_cli_odo/using_odo_in_a_restricted_environment/about-odo-in-a-restricted-environment.adoc b/cli_reference/developer_cli_odo/using_odo_in_a_restricted_environment/about-odo-in-a-restricted-environment.adoc index 8cf47ff11f..c49d215523 100644 --- a/cli_reference/developer_cli_odo/using_odo_in_a_restricted_environment/about-odo-in-a-restricted-environment.adoc +++ b/cli_reference/developer_cli_odo/using_odo_in_a_restricted_environment/about-odo-in-a-restricted-environment.adoc @@ -17,6 +17,6 @@ After you push the `odo` init image, you must xref:../../../cli_reference/develo .Additional resources ifdef::openshift-enterprise,openshift-webscale[] -* xref:../../../installing/install_config/installing-restricted-networks-preparations.adoc#installation-about-mirror-registry_installing-restricted-networks-preparations[Creating a mirror registry for installation in a restricted network] +* xref:../../../installing/installing-mirroring-installation-images.adoc#installation-about-mirror-registry_installing-mirroring-installation-images[Mirroring images for a disconnected installation] endif::[] * xref:../../../registry/accessing-the-registry.adoc#registry-accessing-directly_accessing-the-registry[Accessing the registry] diff --git a/installing/install_config/installing-restricted-networks-preparations.adoc b/installing/installing-mirroring-installation-images.adoc similarity index 55% rename from installing/install_config/installing-restricted-networks-preparations.adoc rename to installing/installing-mirroring-installation-images.adoc index 04bca7482c..93812a83be 100644 --- a/installing/install_config/installing-restricted-networks-preparations.adoc +++ b/installing/installing-mirroring-installation-images.adoc @@ -1,7 +1,7 @@ -[id="installing-restricted-networks-preparations"] -= Creating a mirror registry for installation in a restricted network +[id="installing-mirroring-installation-images"] += Mirroring images for a disconnected installation include::modules/common-attributes.adoc[] -:context: installing-restricted-networks-preparations +:context: installing-mirroring-installation-images toc::[] @@ -16,6 +16,19 @@ to a mirror host, use the disconnected procedure to copy images to a device you can move across network boundaries with. ==== +[id="prerequisites_installing-mirroring-installation-images"] +== Prerequisites + +* You must have a container image registry that supports link:https://docs.docker.com/registry/spec/manifest-v2-2/[Docker v2-2] in the location that will host the {product-title} cluster, such as one of the following registries: ++ +-- +** link:https://www.redhat.com/en/technologies/cloud-computing/quay[Red Hat Quay] +** link:https://jfrog.com/artifactory/[JFrog Artifactory] +** link:https://www.sonatype.com/products/repository-oss?topnav=true[Sonatype Nexus Repository] +** link:https://goharbor.io/[Harbor] +-- +If you have an entitlement to Red Hat Quay, see link:https://access.redhat.com/documentation/en-us/red_hat_quay/3.5/html-single/manage_red_hat_quay/index#repo-mirroring-in-red-hat-quay[Introduction to repository mirroring in Red Hat Quay] for background and installation information. If you need additional assistance selecting and installing a registry, contact your sales representative or Red Hat support. + include::modules/installation-about-mirror-registry.adoc[leveloffset=+1] [id="installing-preparing-mirror"] @@ -60,11 +73,12 @@ include::modules/installation-images-samples-disconnected-mirroring-assist.adoc[ //* TODO need to add the registry secret to the machines, which is different -* Install a cluster on infrastructure that you provision in your restricted nework, such as on -xref:../../installing/installing_vsphere/installing-restricted-networks-vsphere.adoc#installing-restricted-networks-vsphere[VMware vSphere], -xref:../../installing/installing_bare_metal/installing-restricted-networks-bare-metal.adoc#installing-restricted-networks-bare-metal[bare metal], or xref:../../installing/installing_aws/installing-restricted-networks-aws.adoc#installing-restricted-networks-aws[Amazon Web Services]. +* xref:../operators/admin/olm-restricted-networks.adoc#olm-mirror-catalog_olm-restricted-networks[Mirror] the OperatorHub images for the Operators that you want to install in your cluster. +* Install a cluster on infrastructure that you provision in your restricted network, such as on +xref:../installing/installing_vsphere/installing-restricted-networks-vsphere.adoc#installing-restricted-networks-vsphere[VMware vSphere], +xref:../installing/installing_bare_metal/installing-restricted-networks-bare-metal.adoc#installing-restricted-networks-bare-metal[bare metal], or xref:../installing/installing_aws/installing-restricted-networks-aws.adoc#installing-restricted-networks-aws[Amazon Web Services]. [id="restricted-networks-additional-resources"] == Additional resources -* See xref:../../support/gathering-cluster-data.adoc#gathering-data-specific-features_gathering-cluster-data[Gathering data about specific features] for more information about using must-gather. +* See xref:../support/gathering-cluster-data.adoc#gathering-data-specific-features_gathering-cluster-data[Gathering data about specific features] for more information about using must-gather. diff --git a/installing/installing-preparing.adoc b/installing/installing-preparing.adoc index d06d4d1224..10977abe6a 100644 --- a/installing/installing-preparing.adoc +++ b/installing/installing-preparing.adoc @@ -62,7 +62,7 @@ If you use a user-provisioned installation method, you can configure a proxy for If you want to prevent your cluster on a public cloud from exposing endpoints externally, you can deploy a private cluster with installer-provisioned infrastructure on xref:../installing/installing_aws/installing-aws-private.adoc#installing-aws-private[AWS], xref:../installing/installing_azure/installing-azure-private.adoc#installing-azure-private[Azure], or xref:../installing/installing_gcp/installing-gcp-private.adoc#installing-gcp-private[GCP]. -If you need to install your cluster that has limited access to the Internet, such as a disconnected or restricted network cluster, you can xref:../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[mirror the installation packages] and install the cluster from them. Follow detailed instructions for user provisioned infrastructure installations into restricted networks for xref:../installing/installing_aws/installing-restricted-networks-aws.adoc#installing-restricted-networks-aws[AWS], xref:../installing/installing_gcp/installing-restricted-networks-gcp.adoc#installing-restricted-networks-gcp[GCP], xref:../installing/installing_ibm_z/installing-restricted-networks-ibm-z.adoc#installing-restricted-networks-ibm-z[IBM Z or LinuxONE], xref:../installing/installing_ibm_power/installing-restricted-networks-ibm-power.adoc#installing-restricted-networks-ibm-power[IBM Power], xref:../installing/installing_vsphere/installing-restricted-networks-vsphere.adoc#installing-restricted-networks-vsphere[vSphere], or xref:../installing/installing_bare_metal/installing-restricted-networks-bare-metal.adoc#installing-restricted-networks-bare-metal[bare metal]. You can also install a cluster into a restricted network using installer-provisioned infrastructure by following detailed instructions for xref:../installing/installing_aws/installing-restricted-networks-aws-installer-provisioned.adoc#installing-restricted-networks-aws-installer-provisioned[AWS], xref:../installing/installing_gcp/installing-restricted-networks-gcp-installer-provisioned.adoc#installing-restricted-networks-gcp-installer-provisioned[GCP], xref:../installing/installing_openstack/installing-openstack-installer-restricted.adoc#installing-openstack-installer-restricted[{rh-openstack}], xref:../installing/installing_rhv/installing-rhv-restricted-network.adoc#installing-rhv-restricted-network[{rh-virtualization}], and xref:../installing/installing_vsphere/installing-restricted-networks-installer-provisioned-vsphere.adoc#installing-restricted-networks-installer-provisioned-vsphere[vSphere]. +If you need to install your cluster that has limited access to the Internet, such as a disconnected or restricted network cluster, you can xref:../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[mirror the installation packages] and install the cluster from them. Follow detailed instructions for user provisioned infrastructure installations into restricted networks for xref:../installing/installing_aws/installing-restricted-networks-aws.adoc#installing-restricted-networks-aws[AWS], xref:../installing/installing_gcp/installing-restricted-networks-gcp.adoc#installing-restricted-networks-gcp[GCP], xref:../installing/installing_ibm_z/installing-restricted-networks-ibm-z.adoc#installing-restricted-networks-ibm-z[IBM Z or LinuxONE], xref:../installing/installing_ibm_power/installing-restricted-networks-ibm-power.adoc#installing-restricted-networks-ibm-power[IBM Power], xref:../installing/installing_vsphere/installing-restricted-networks-vsphere.adoc#installing-restricted-networks-vsphere[vSphere], or xref:../installing/installing_bare_metal/installing-restricted-networks-bare-metal.adoc#installing-restricted-networks-bare-metal[bare metal]. You can also install a cluster into a restricted network using installer-provisioned infrastructure by following detailed instructions for xref:../installing/installing_aws/installing-restricted-networks-aws-installer-provisioned.adoc#installing-restricted-networks-aws-installer-provisioned[AWS], xref:../installing/installing_gcp/installing-restricted-networks-gcp-installer-provisioned.adoc#installing-restricted-networks-gcp-installer-provisioned[GCP], xref:../installing/installing_openstack/installing-openstack-installer-restricted.adoc#installing-openstack-installer-restricted[{rh-openstack}], xref:../installing/installing_rhv/installing-rhv-restricted-network.adoc#installing-rhv-restricted-network[{rh-virtualization}], and xref:../installing/installing_vsphere/installing-restricted-networks-installer-provisioned-vsphere.adoc#installing-restricted-networks-installer-provisioned-vsphere[vSphere]. If you need to deploy your cluster to an xref:../installing/installing_aws/installing-aws-government-region.adoc#installing-aws-government-region[AWS GovCloud region] or xref:../installing/installing_azure/installing-azure-government-region.adoc#installing-azure-government-region[Azure government region], you can configure those custom regions during an installer-provisioned infrastructure installation. diff --git a/installing/installing_aws/installing-restricted-networks-aws-installer-provisioned.adoc b/installing/installing_aws/installing-restricted-networks-aws-installer-provisioned.adoc index 78ee02aea0..d19dcf3d81 100644 --- a/installing/installing_aws/installing-restricted-networks-aws-installer-provisioned.adoc +++ b/installing/installing_aws/installing-restricted-networks-aws-installer-provisioned.adoc @@ -10,7 +10,7 @@ In {product-title} version {product-version}, you can install a cluster on Amazo [id="prerequisites_installing-restricted-networks-aws-installer-provisioned"] == Prerequisites -* You xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[created a mirror registry on your mirror host] and obtained the `imageContentSources` data for your version of {product-title}. +* You xref:../../installing/installing-mirroring-installation-images.adoc#installation-about-mirror-registry_installing-mirroring-installation-images[mirrored the images for a disconnected installation] to your registry and obtained the `imageContentSources` data for your version of {product-title}. + [IMPORTANT] ==== diff --git a/installing/installing_aws/installing-restricted-networks-aws.adoc b/installing/installing_aws/installing-restricted-networks-aws.adoc index 6f8af5f586..6d1f8cf0e4 100644 --- a/installing/installing_aws/installing-restricted-networks-aws.adoc +++ b/installing/installing_aws/installing-restricted-networks-aws.adoc @@ -27,7 +27,7 @@ The steps for performing a user-provisioned infrastructure installation are prov == Prerequisites -* You xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[created a mirror registry on your mirror host] +* You xref:../../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[created a mirror registry on your mirror host] and obtained the `imageContentSources` data for your version of {product-title}. + [IMPORTANT] diff --git a/installing/installing_bare_metal/installing-restricted-networks-bare-metal.adoc b/installing/installing_bare_metal/installing-restricted-networks-bare-metal.adoc index bc99e727cb..f41021e979 100644 --- a/installing/installing_bare_metal/installing-restricted-networks-bare-metal.adoc +++ b/installing/installing_bare_metal/installing-restricted-networks-bare-metal.adoc @@ -19,7 +19,7 @@ before you attempt to install an {product-title} cluster in such an environment. == Prerequisites -* xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[Create a registry on your mirror host] and obtain the `imageContentSources` data for your version of {product-title}. +* xref:../../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[Create a registry on your mirror host] and obtain the `imageContentSources` data for your version of {product-title}. + [IMPORTANT] ==== diff --git a/installing/installing_gcp/installing-restricted-networks-gcp-installer-provisioned.adoc b/installing/installing_gcp/installing-restricted-networks-gcp-installer-provisioned.adoc index 8c2a649bea..556beed918 100644 --- a/installing/installing_gcp/installing-restricted-networks-gcp-installer-provisioned.adoc +++ b/installing/installing_gcp/installing-restricted-networks-gcp-installer-provisioned.adoc @@ -15,11 +15,11 @@ You can install an {product-title} cluster by using mirrored installation releas [id="prerequisites_installing-restricted-networks-gcp-installer-provisioned"] == Prerequisites -* You xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[created a mirror registry on your bastion host] and obtained the `imageContentSources` data for your version of {product-title}. +* You xref:../../installing/installing-mirroring-installation-images.adoc#installation-about-mirror-registry_installing-mirroring-installation-images[mirrored the images for a disconnected installation] to your registry and obtained the `imageContentSources` data for your version of {product-title}. + [IMPORTANT] ==== -Because the installation media is on the bastion host, use that computer to complete all installation steps. +Because the installation media is on the mirror host, you can use that computer to complete all installation steps. ==== * You have an existing VPC in GCP. While installing a cluster in a restricted network that uses installer-provisioned infrastructure, you cannot use the installer-provisioned VPC. You must use a user-provisioned VPC that satisfies one of the following requirements: ** Contains the mirror registry diff --git a/installing/installing_gcp/installing-restricted-networks-gcp.adoc b/installing/installing_gcp/installing-restricted-networks-gcp.adoc index 74f7fdfa27..84a437c226 100644 --- a/installing/installing_gcp/installing-restricted-networks-gcp.adoc +++ b/installing/installing_gcp/installing-restricted-networks-gcp.adoc @@ -21,11 +21,11 @@ The steps for performing a user-provisioned infrastructure installation are prov == Prerequisites -* xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[Create a mirror registry on your bastion host] and obtain the `imageContentSources` data for your version of {product-title}. +* * xref:../../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[Create a registry on your mirror host] and obtain the `imageContentSources` data for your version of {product-title}. + [IMPORTANT] ==== -Because the installation media is on the bastion host, use that computer to complete all installation steps. +Because the installation media is on the mirror host, you can use that computer to complete all installation steps. ==== * Review details about the xref:../../architecture/architecture-installation.adoc#architecture-installation[{product-title} installation and update] processes. * If you use a firewall, you must xref:../../installing/install_config/configuring-firewall.adoc#configuring-firewall[configure it to allow the sites] that your cluster requires access to. While you might need to grant access to more sites, you must grant access to `*.googleapis.com` and `accounts.google.com`. @@ -89,7 +89,7 @@ include::modules/installation-gcp-user-infra-wait-for-bootstrap.adoc[leveloffset include::modules/installation-creating-gcp-worker.adoc[leveloffset=+1] include::modules/installation-deployment-manager-worker.adoc[leveloffset=+2] -//You install the CLI on the bastion host. +//You install the CLI on the mirror host. include::modules/cli-logging-in-kubeadmin.adoc[leveloffset=+1] diff --git a/installing/installing_ibm_power/installing-restricted-networks-ibm-power.adoc b/installing/installing_ibm_power/installing-restricted-networks-ibm-power.adoc index 2629bc8025..ff75fb1043 100644 --- a/installing/installing_ibm_power/installing-restricted-networks-ibm-power.adoc +++ b/installing/installing_ibm_power/installing-restricted-networks-ibm-power.adoc @@ -16,7 +16,7 @@ link:https://access.redhat.com/articles/4207611[guidelines for deploying {produc .Prerequisites -* xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[Create a mirror registry for installation in a restricted network] and obtain the `imageContentSources` data for your version of {product-title}. +* xref:../../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[Create a mirror registry for installation in a restricted network] and obtain the `imageContentSources` data for your version of {product-title}. * Before you begin the installation process, you must move or remove any existing installation files. This ensures that the required installation files are created and updated during the installation process. + [IMPORTANT] @@ -58,7 +58,7 @@ include::modules/ssh-agent-using.adoc[leveloffset=+1] //You extract the installation program from the mirrored content. -//You install the CLI on the bastion host. +//You install the CLI on the mirror host. include::modules/installation-initializing-manual.adoc[leveloffset=+1] diff --git a/installing/installing_ibm_z/installing-restricted-networks-ibm-z.adoc b/installing/installing_ibm_z/installing-restricted-networks-ibm-z.adoc index d82c1b547c..224c9807c5 100644 --- a/installing/installing_ibm_z/installing-restricted-networks-ibm-z.adoc +++ b/installing/installing_ibm_z/installing-restricted-networks-ibm-z.adoc @@ -21,7 +21,7 @@ link:https://access.redhat.com/articles/4207611[guidelines for deploying {produc .Prerequisites -* xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[Create a mirror registry for installation in a restricted network] and obtain the `imageContentSources` data for your version of {product-title}. +* xref:../../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[Create a mirror registry for installation in a restricted network] and obtain the `imageContentSources` data for your version of {product-title}. * Before you begin the installation process, you must move or remove any existing installation files. This ensures that the required installation files are created and updated during the installation process. + [IMPORTANT] @@ -66,7 +66,7 @@ include::modules/ssh-agent-using.adoc[leveloffset=+1] //You extract the installation program from the mirrored content. -//You install the CLI on the bastion host. +//You install the CLI on the mirror host. include::modules/installation-initializing-manual.adoc[leveloffset=+1] diff --git a/installing/installing_openstack/installing-openstack-installer-restricted.adoc b/installing/installing_openstack/installing-openstack-installer-restricted.adoc index cda181bdc2..32ccc5cab3 100644 --- a/installing/installing_openstack/installing-openstack-installer-restricted.adoc +++ b/installing/installing_openstack/installing-openstack-installer-restricted.adoc @@ -10,13 +10,12 @@ In {product-title} {product-version}, you can install a cluster on .Prerequisites -* xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[Create a mirror registry on your bastion host] +* * xref:../../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[Create a registry on your mirror host] and obtain the `imageContentSources` data for your version of {product-title}. + [IMPORTANT] ==== -Because the installation media is on the bastion host, use that computer -to complete all installation steps. +Because the installation media is on the mirror host, you can use that computer to complete all installation steps. ==== * Review details about the diff --git a/installing/installing_rhv/installing-rhv-restricted-network.adoc b/installing/installing_rhv/installing-rhv-restricted-network.adoc index a6df57c78a..44d5652203 100644 --- a/installing/installing_rhv/installing-rhv-restricted-network.adoc +++ b/installing/installing_rhv/installing-rhv-restricted-network.adoc @@ -14,7 +14,7 @@ The following items are required to install an {product-title} cluster on a {rh- * You have a supported combination of versions in the link:https://access.redhat.com/articles/5485861[Support Matrix for {product-title} on {rh-virtualization}]. * You are familiar with the xref:../../architecture/architecture-installation.adoc#architecture-installation[{product-title} installation and update] processes. -* xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[Create a registry on your mirror host] and obtain the `imageContentSources` data for your version of {product-title}. +* xref:../../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[Create a registry on your mirror host] and obtain the `imageContentSources` data for your version of {product-title}. + [IMPORTANT] ==== diff --git a/installing/installing_vmc/installing-restricted-networks-vmc-user-infra.adoc b/installing/installing_vmc/installing-restricted-networks-vmc-user-infra.adoc index 6d797757aa..71bb6ce09c 100644 --- a/installing/installing_vmc/installing-restricted-networks-vmc-user-infra.adoc +++ b/installing/installing_vmc/installing-restricted-networks-vmc-user-infra.adoc @@ -14,7 +14,7 @@ include::modules/vmc-sizer-tool.adoc[leveloffset=+2] == vSphere prerequisites -* xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[Create a registry on your mirror host] and obtain the `imageContentSources` data for your version of {product-title}. +* xref:../../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[Create a registry on your mirror host] and obtain the `imageContentSources` data for your version of {product-title}. + [IMPORTANT] ==== diff --git a/installing/installing_vmc/installing-restricted-networks-vmc.adoc b/installing/installing_vmc/installing-restricted-networks-vmc.adoc index fd705f0a5f..c5a709f829 100644 --- a/installing/installing_vmc/installing-restricted-networks-vmc.adoc +++ b/installing/installing_vmc/installing-restricted-networks-vmc.adoc @@ -15,7 +15,7 @@ include::modules/vmc-sizer-tool.adoc[leveloffset=+2] [id="vsphere-prerequisites_installing-restricted-networks-vmc"] == vSphere prerequisites -* xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[Create a registry on your mirror host] and obtain the `imageContentSources` data for your version of {product-title}. +* xref:../../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[Create a registry on your mirror host] and obtain the `imageContentSources` data for your version of {product-title}. + [IMPORTANT] ==== diff --git a/installing/installing_vsphere/installing-restricted-networks-installer-provisioned-vsphere.adoc b/installing/installing_vsphere/installing-restricted-networks-installer-provisioned-vsphere.adoc index bebda99e59..9bfbc1ce81 100644 --- a/installing/installing_vsphere/installing-restricted-networks-installer-provisioned-vsphere.adoc +++ b/installing/installing_vsphere/installing-restricted-networks-installer-provisioned-vsphere.adoc @@ -10,7 +10,7 @@ In {product-title} {product-version}, you can install a cluster on VMware vSpher [id="prerequisites_installing-restricted-networks-installer-provisioned-vsphere"] == Prerequisites -* xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[Create a registry on your mirror host] and obtain the `imageContentSources` data for your version of {product-title}. +* xref:../../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[Create a registry on your mirror host] and obtain the `imageContentSources` data for your version of {product-title}. + [IMPORTANT] ==== diff --git a/installing/installing_vsphere/installing-restricted-networks-vsphere.adoc b/installing/installing_vsphere/installing-restricted-networks-vsphere.adoc index 0e8046d5fd..43e4c83e8e 100644 --- a/installing/installing_vsphere/installing-restricted-networks-vsphere.adoc +++ b/installing/installing_vsphere/installing-restricted-networks-vsphere.adoc @@ -15,7 +15,7 @@ The steps for performing a user-provisioned infrastructure installation are prov == Prerequisites -* xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[Create a registry on your mirror host] and obtain the `imageContentSources` data for your version of {product-title}. +* xref:../../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[Create a registry on your mirror host] and obtain the `imageContentSources` data for your version of {product-title}. + [IMPORTANT] ==== diff --git a/modules/installation-about-mirror-registry.adoc b/modules/installation-about-mirror-registry.adoc index f7679cdb11..9d8c55986a 100644 --- a/modules/installation-about-mirror-registry.adoc +++ b/modules/installation-about-mirror-registry.adoc @@ -8,7 +8,7 @@ You can mirror the images that are required for {product-title} installation and subsequent product updates to a mirror registry. These actions use the same process. The release image, which contains the description of the content, and the images it references are all mirrored. In addition, the Operator catalog source image and the images that it references must be mirrored for each Operator that you use. After you mirror the content, you configure each cluster to retrieve this content from your mirror registry. -The mirror registry can be any container registry that supports the most recent container image API, which is referred to as `schema2`. All major cloud provider registries, as well as Red Hat Quay, Artifactory, and the open source link:https://github.com/docker/distribution[Docker distribution registry] have the necessary support. Using one of these registries ensures that {product-title} can verify the integrity of each image in disconnected environments. +The mirror registry can be any container registry that supports link:https://docs.docker.com/registry/spec/manifest-v2-2/[Docker v2-2]. All major cloud provider registries, as well as Red Hat Quay, Artifactory, and others, have the necessary support. Using one of these registries ensures that {product-title} can verify the integrity of each image in disconnected environments. The mirror registry must be reachable by every machine in the clusters that you provision. If the registry is unreachable installation, updating, or normal operations such as workload relocation might fail. For that reason, you must run mirror registries in a highly available way, and the mirror registries must at least match the production availability of your {product-title} clusters. diff --git a/modules/installation-creating-image-restricted.adoc b/modules/installation-creating-image-restricted.adoc index 4424b7ed1f..822f17ba12 100644 --- a/modules/installation-creating-image-restricted.adoc +++ b/modules/installation-creating-image-restricted.adoc @@ -24,7 +24,7 @@ environment. .Prerequisites -* Obtain the {product-title} installation program. For a restricted network installation, the program is on your bastion host. +* Obtain the {product-title} installation program. For a restricted network installation, the program is on your mirror registry host. .Procedure diff --git a/operators/admin/olm-managing-custom-catalogs.adoc b/operators/admin/olm-managing-custom-catalogs.adoc index 690da16e56..7ea4953e1b 100644 --- a/operators/admin/olm-managing-custom-catalogs.adoc +++ b/operators/admin/olm-managing-custom-catalogs.adoc @@ -32,7 +32,7 @@ include::modules/olm-pruning-index-image.adoc[leveloffset=+2] include::modules/olm-building-operator-catalog-image.adoc[leveloffset=+2] .Additional resources -* xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[Creating a mirror registry for installation in a restricted network] +* xref:../../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[Mirroring images for a disconnected installation] include::modules/olm-mirroring-package-manifest-catalog.adoc[leveloffset=+2] .Additional resources diff --git a/operators/admin/olm-restricted-networks.adoc b/operators/admin/olm-restricted-networks.adoc index 3fe1676c27..a764af6414 100644 --- a/operators/admin/olm-restricted-networks.adoc +++ b/operators/admin/olm-restricted-networks.adoc @@ -53,7 +53,7 @@ include::modules/olm-pruning-index-image.adoc[leveloffset=+1] include::modules/olm-mirroring-catalog.adoc[leveloffset=+1] .Additional resources -* xref:../../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[Creating a mirror registry for installation in a restricted network] +* xref:../../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[Mirroring images for a disconnected installation] * xref:../../operators/operator_sdk/osdk-generating-csvs.adoc#olm-arch-os-support_osdk-generating-csvs[Architecture and operating system support for Operators] * xref:../../operators/admin/olm-managing-custom-catalogs.adoc#olm-mirroring-package-manifest-catalog_olm-managing-custom-catalogs[Mirroring a Package Manifest Format catalog image] diff --git a/welcome/index.adoc b/welcome/index.adoc index 92784797e2..bda0c7c6c7 100644 --- a/welcome/index.adoc +++ b/welcome/index.adoc @@ -67,7 +67,7 @@ xref:../installing/installing_vsphere/installing-restricted-networks-vsphere.ado or xref:../installing/installing_bare_metal/installing-restricted-networks-bare-metal.adoc#installing-restricted-networks-bare-metal[bare metal] does not have full access to the internet, you can -xref:../installing/install_config/installing-restricted-networks-preparations.adoc#installing-restricted-networks-preparations[mirror the {product-title} installation images] +xref:../installing/installing-mirroring-installation-images.adoc#installing-mirroring-installation-images[mirror the {product-title} installation images] and install a cluster in a restricted network. - **Install a cluster in an existing network**: If you use an existing Virtual Private Cloud (VPC) in