User Installation Guide - Disconnected Installations

Prerequisites

• Disconnected Mirror Image Registry created
• Private cluster Installed
• You created a registry on your mirror host

Configuring the Disconnected Mirror Registry

Mirror images used by conformance suite

1. Extract the openshift-tests executable associated with the version of OpenShift you are installing. Note: The pull secret must contain both your OpenShift pull secret as well credentials for the disconnected mirror registry.

PULL_SECRET=/path/to/pull-secret
OPENSHIFT_TESTS_IMAGE=$(oc get is -n openshift tests -o=jsonpath='{.spec.tags[0].from.name}')
oc image extract -a ${PULL_SECRET} "${OPENSHIFT_TESTS_IMAGE}" --file="/usr/bin/openshift-tests"
chmod +x openshift-tests

1. Extract the images and the location to where they are to be mirrored from the openshift-tests executable.

TARGET_REPO=target-registry.net/ocp-cert
./openshift-tests images --to-repository ${TARGET_REPO} > images-to-mirror

Mirror images used by test environment

For OPCT v0.4.x and older:

1. A) Append Sonobuoy to the images-to-mirror list

SONOBUOY_TAG=$(./openshift-provider-cert-linux-amd64 version | grep "Sonobuoy Version:" | cut -d' ' -f 3)
SONOBUOY_TARGET=${TARGET_REPO}/sonobuoy:${SONOBUOY_TAG}
echo "quay.io/ocp-cert/sonobuoy:${SONOBUOY_TAG} ${SONOBUOY_TARGET}" >> images-to-mirror

1. B) Append the OPCT tools image to the images-to-mirror list:

OPCT_VERSION=v0.4.1
OPCT_TARGET=${TARGET_REPO}/openshift-tests-provider-cert:${OPCT_VERSION}
echo "quay.io/ocp-cert/openshift-tests-provider-cert:${OPCT_VERSION} ${OPCT_TARGET}" >> images-to-mirror

1. C) Append extra images used by conformance tool to the images-to-mirror list:

PAUSE_TARGET=${TARGET_REPO}/ocp-cert:e2e-28-registry-k8s-io-pause-3-8-aP7uYsw5XCmoDy5W
echo "registry.k8s.io/pause:3.8 ${PAUSE_TARGET}" >> images-to-mirror

For OPCT v0.5.0 and newer:

1. Append images used by OPCT to the images-to-mirror list:

./opct get images --to-repository ${TARGET_REPO} >> images-to-mirror

Mirror the images

1. Mirror the images to the disconnected mirror registry

oc image mirror -a ${PULL_SECRET} -f images-to-mirror

Preparing Your Cluster

• The Insights operator must be disabled prior to to running tests. See Disabling insights operator
• The Image Registry Operator must be configured and available

For additional details and configuration options, see User Guide.